Telegram Autopilot

• Analyzed: May 15, 2026, 6:20 AM
• Findings: 1
• Version: 1.1.1
• Hash: 97b8af8f7ba1b1b6bafefbed3a95a4b8a6c68749a91e6d8de70370397ee99ee7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a Telegram userbot with full account access, which is a high-risk capability. It handles sensitive session files, API credentials, and intercepts all private messages to forward them to AI providers and a notification bot. While the behavior aligns with the stated 'autopilot' purpose, the bundle includes a local unauthenticated web server (scripts/code_server.py) for OTP capture and scripts that simulate human behavior (typing indicators, marking messages as read) to avoid detection, which are common patterns in dual-use or account-takeover tools.