Security audit
Telegram Routing
Security checks across malware telemetry and agentic risk
Overview
This is a simple Telegram model-routing skill with no executable code, credential access, or hidden behavior in the reviewed artifacts.
Install this only if you want a Telegram command that changes the Claude model used for chats. The reviewed package does not show code execution or data access, but the model choice may affect response quality, speed, and cost depending on the host environment.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.