ClawHub
Back to skill

Security audit

Telegram Full Access

Security checks across malware telemetry and agentic risk

Overview

This skill openly sets up full Telegram account access for an agent, which is sensitive but clearly disclosed and aligned with its stated purpose.

Install only if you intentionally want an agent to access Telegram with the same broad visibility as the logged-in account. Prefer a dedicated Telegram account, protect Chiho tokens and Telegram API credentials like passwords, avoid putting tokens in URLs or shared logs, and revoke tokens or log out sessions when access is no longer needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Credential Access

High
Category
Privilege Escalation
Content
1. Open [Chiho.ai](https://chiho.ai/signup).
2. Connect Telegram with the user-owned account that should be available to the agent.
3. Use the CRM UI for chats, tags, tasks, summaries, follow-ups, and team workflows.
4. Mint an Agent Access token from `https://chiho.ai/profile/agent-access`.
5. Copy the MCP endpoint shown on Agent Access and configure OpenClaw or another compatible client to send `Authorization: Bearer <CHIHO_AGENT_TOKEN>` with every MCP request.

Claude Code supports this hosted bearer-token flow through `claude mcp add --transport http ... --header ...`. Claude web, Claude Desktop, and Cowork remote custom connectors require OAuth for authenticated hosted servers and cannot use Chiho Agent Access tokens yet. Never place a Chiho token in a connector URL or OAuth credential field.
Confidence
90% confidence
Finding
Access token

Credential Access

High
Category
Privilege Escalation
Content
4. Mint an Agent Access token from `https://chiho.ai/profile/agent-access`.
5. Copy the MCP endpoint shown on Agent Access and configure OpenClaw or another compatible client to send `Authorization: Bearer <CHIHO_AGENT_TOKEN>` with every MCP request.

Claude Code supports this hosted bearer-token flow through `claude mcp add --transport http ... --header ...`. Claude web, Claude Desktop, and Cowork remote custom connectors require OAuth for authenticated hosted servers and cannot use Chiho Agent Access tokens yet. Never place a Chiho token in a connector URL or OAuth credential field.

Prefer this path when the user wants the CRM UI, hosted session management, or the quickest setup.
Confidence
88% confidence
Finding
Access tokens

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.