Tg Search

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill’s stated purpose is coherent, but it relies on an existing authorized Telegram session and an unreviewed local helper outside the package.

Review this skill before installing. It may be acceptable if you control /usr/local/bin/tg_search and the Telethon session is a dedicated account limited to public search, but the provided package does not include or verify that helper and does not document the session boundary.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

Installing or invoking this skill may use an existing Telegram account session on the machine, not just an anonymous public search.

Why it was flagged

An authorized Telethon session represents delegated access to a Telegram account. The artifacts do not specify which account/session is used, where the session is stored, what permissions are available, or how access is constrained to public search.

Skill content

using an already-authorized Telethon session on this VPS

Recommendation

Use a dedicated low-privilege Telegram account/session for this skill, document the session location and account, and ensure the user can revoke or rotate it.

ConcernHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The main behavior depends on unreviewed local code, so the user cannot verify from these artifacts whether it only performs the advertised public Telegram search.

Why it was flagged

The skill executes a system-wide helper that is not included in the manifest and has no install/provenance information. The reviewed package therefore does not show the code that performs the Telegram access.

Skill content

["/usr/local/bin/tg_search", query, limit]

Recommendation

Include the helper source or a pinned, verifiable install specification, and declare /usr/local/bin/tg_search as a required binary.

NoteHigh Confidence

ASI05: Unexpected Code Execution

What this means

Using the skill runs a local program on the host, with behavior determined by that installed helper.

Why it was flagged

The wrapper runs a local command. This is disclosed and central to the skill purpose, and it avoids shell=True, but users should still be aware that invoking the skill executes local code.

Skill content

subprocess.run(
        ["/usr/local/bin/tg_search", query, limit],
        capture_output=True,
        text=True
    )

Recommendation

Verify the installed /usr/local/bin/tg_search helper before use and keep it under controlled ownership and permissions.