Skip to main content

add-telegram-swarm

Integrates Agent Swarm support into Telegram, enabling distinct bot identities for subagents in group chats.

Install this skill

or
67/100

Security score

The add-telegram-swarm skill was audited on Mar 3, 2026 and we found 7 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 135

Template literal with variable interpolation in command context

SourceSKILL.md
135const key = `${groupFolder}:${sender}`;
high line 360

Curl to non-GitHub URL

SourceSKILL.md
3601. Verify tokens: `curl -s "https://api.telegram.org/botTOKEN/getMe"`
low line 65

Access to .env file

SourceSKILL.md
65export const TELEGRAM_BOT_POOL = (process.env.TELEGRAM_BOT_POOL || '')
medium line 305

Access to .env file

SourceSKILL.md
305Add pool tokens to `.env`:
low line 314

Access to .env file

SourceSKILL.md
314cp .env data/env/env
medium line 383

Access to .env file

SourceSKILL.md
3837. Remove `TELEGRAM_BOT_POOL` from `.env`, `data/env/env`, and launchd plist/systemd unit
low line 360

External URL reference

SourceSKILL.md
3601. Verify tokens: `curl -s "https://api.telegram.org/botTOKEN/getMe"`
Scanned on Mar 3, 2026
View Security Dashboard