ClawHub
Back to skill

Security audit

Telegram Msg Toolkit Free

Security checks across malware telemetry and agentic risk

Overview

This skill is a Telegram Bot API helper whose network and message-changing behavior is disclosed and aligned with its stated purpose, though users should treat live chat actions carefully.

Install only if you intend the agent to operate a Telegram bot. Use a least-privilege bot, keep TELEGRAM_BOT_TOKEN in the environment rather than files, review every message/file/chat ID before sending, and avoid giving the bot admin permissions unless deletion or invite-link management is truly needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The capability coverage text is overly broad and ambiguous, encouraging the agent to treat a wide range of loosely related keywords as authorization to perform Telegram actions. In an agent setting, this can cause unintended message sending, chat queries, or bot state changes when user intent is unclear, increasing the risk of accidental external actions.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill describes sending messages and querying chats over Telegram's external API but does not clearly warn that chat content, identifiers, and possibly files will be transmitted to a third-party service. Users may unknowingly expose sensitive operational data, personal information, or internal identifiers through agent-triggered network calls.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The examples present message-sending and other state-changing bot actions as straightforward operations without emphasizing that they can post into real chats, alter bot-visible state, or affect users/groups. In an agent workflow, this lowers the barrier to accidental or unauthorized actions in production chats.

External Transmission

Medium
Category
Data Exfiltration
Content
本工具箱封装 Telegram Bot API 的基础消息能力，让 AI Agent 能够通过 REST API 发送文本、图片、文件、位置、投票与转发消息，查询聊天信息，并管理 Bot 命令。免费版聚焦"能发能查"——覆盖 6 类基础消息发送与聊天信息读取；批量操作、群组管理、审核与 Webhook 等进阶能力留给专业版。

Telegram Bot API 使用 HTTP REST 接口，所有请求通过 `https://api.telegram.org/bot<TOKEN>/<METHOD>` 调用，响应为 JSON 格式。

## 核心能力
Confidence
90% confidence
Finding
https://api.telegram.org/

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.