Skip to main content

telegram-mini-app

Builds Telegram Mini Apps with native-like experiences, integrating payments and user authentication for monetization in the TON ecosystem.

Install this skill

or
62/100

Security score

The telegram-mini-app skill was audited on May 12, 2026 and we found 10 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 212

Template literal with variable interpolation in command context

SourceSKILL.md
212const referralLink = `https://t.me/your_bot?start=ref_${user.id}`;
high line 216

Template literal with variable interpolation in command context

SourceSKILL.md
216`https://t.me/share/url?url=${encodeURIComponent(referralLink)}&text=Check this out!`
low line 46

External URL reference

SourceSKILL.md
46<script src="https://telegram.org/js/telegram-web-app.js"></script>
low line 98

External URL reference

SourceSKILL.md
98{ text: '🚀 Open App', web_app: { url: 'https://your-app.com' } }
low line 127

External URL reference

SourceSKILL.md
127<TonConnectUIProvider manifestUrl="https://your-app.com/tonconnect-manifest.json">
low line 144

External URL reference

SourceSKILL.md
144"url": "https://your-app.com",
low line 146

External URL reference

SourceSKILL.md
146"iconUrl": "https://your-app.com/icon.png"
low line 212

External URL reference

SourceSKILL.md
212const referralLink = `https://t.me/your_bot?start=ref_${user.id}`;
low line 216

External URL reference

SourceSKILL.md
216`https://t.me/share/url?url=${encodeURIComponent(referralLink)}&text=Check this out!`
low line 292

External URL reference

SourceSKILL.md
292> **Adapted for [@techwavedev/agi-agent-kit](https://www.npmjs.com/package/@techwavedev/agi-agent-kit)**
Scanned on May 12, 2026
View Security Dashboard
Installation guide →