Security audit
Security checks for vulnerabilities and agentic risk
This skill is aligned with Telegram sales support, but it asks to remember and learn from customer chats without clear consent, retention, or control details.
Review this skill before installing if your Telegram conversations include personal, customer, pricing, or business-sensitive data. Configure it so conversation memory, auto-learning, Feishu sync, and learned talktrack updates require explicit user approval and have clear retention/deletion rules.
The skill explicitly describes remembering customer history and analyzing Telegram conversations, but it does not warn users that personal/customer conversation data may be stored and processed. In a sales-chat context, this can lead to undisclosed collection of personal or business-sensitive information, creating privacy, consent, and compliance risks.
The skill states it will automatically learn from successful and failed conversations to optimize the talk-track library, but it does not clearly disclose that prior conversations may be reused for model updates or content generation. This creates a risk that sensitive customer messages, pricing details, objections, or other proprietary information will be repurposed without notice or consent.
The markdown says the skill will automatically switch between Chinese and English, but it does not indicate that the user can choose or opt in to the language/locale behavior. Under the policy, forcing a language behavior without explicit choice can be a natural-language policy violation.
No suspicious patterns detected.
