Tgsearch Telethon

Search public Telegram channels and groups by keyword using an authorized Telethon session, returning up to 50 results as JSON.

Security Scan

The skill's code and instructions are coherent with its stated purpose (searching Telegram via a local Telethon session) but it relies on a pre-existing system binary and session on the VPS, so you should verify those external components before trusting it.

Purpose & Capability

The name/description say it will search public Telegram channels via a local Telethon session; the included run.py simply invokes /usr/local/bin/tg_search and returns its JSON — this is consistent with the claimed capability. The skill does require an already-authorized Telethon session and a local helper binary, which is expected for this design.

Instruction Scope

SKILL.md and run.py only run the absolute-path helper (/usr/local/bin/tg_search) with query/limit and relay its JSON output. The instructions do not read arbitrary files or environment variables, but they assume access to a local Telethon session and an external binary which may in turn access sensitive credentials on the VPS.

Install Mechanism

No install spec is provided (instruction-only with a small wrapper run.py). Nothing in the skill writes code to disk or downloads external artifacts as part of installation.

Credentials

The skill requests no environment variables or credentials. However, its operation depends on a pre-existing authorized Telethon session and a system binary; those external items may expose Telegram credentials or session files on the host. That implicit access is proportional to the task but is a sensitive dependency you should verify.

Persistence & Privilege

The skill does not request always:true, does not include an installer that modifies other skills or system-wide settings, and doesn't persist new credentials. It only invokes a local binary at runtime.

Assessment

This skill is internally consistent, but it depends on /usr/local/bin/tg_search and an already-authorized Telethon session on the VPS. Before installing or enabling it: (1) inspect the helper binary (/usr/local/bin/tg_search) to confirm its provenance and behavior; (2) verify what Telethon session files or API keys exist on the host (they will be used by the helper); (3) note the small inconsistencies (skill.json entrypoint is "tg_search" while the repository includes run.py) — ensure the platform will execute the intended wrapper; (4) run the helper in an isolated environment (or review its source) if you cannot fully trust the VPS contents. If you want higher assurance, request the helper's source or replace /usr/local/bin/tg_search with a reviewed implementation.

tg_search

Search public Telegram channels and groups by keyword using an already-authorized Telethon session on this VPS.

What it does

• Runs global Telegram search for public channels/groups matching a query
• Returns up to limit results as JSON

Command executed

/usr/local/bin/tg_search "<query>" <limit>

Inputs

• query (string, required): e.g. "crypto", "здоровье", "ai agents"
• limit (int, optional, default 10, max 50)

Output (JSON)

[ { "type": "channel|group", "title": "...", "username": "...", "id": 123456789 }, ... ]

Notes / limitations

• Only public channels/groups discoverable by Telegram search.
• No access to private groups/chats without an invite.
• username can be null if there is no public @username.