telegram-chat-tool-free@1.0.1
VERIFIEDPublisher claims: "电报聊天工具免费版,为个人用户提供 Telegram Bot 创建、配置与跨实例聊天能力,支持用户艾特、消息收发与基础群组管理。核心能力: - Telegram Bot 快速创建与配置 - 跨 Bot 实例消息通信 - 用户艾特(@提及)功能 - 群组消息收发 - 基础身份标识与消息溯源 适用场景: - 个人用户搭建专属 Telegram Bot - 小团队跨 Bot 协作聊天 - 群组内艾特提醒与消息通知 差异化:免费版聚焦个人用户与小团队的 Telegram 聊天需求,提供从零开始的 Bot 配置指南..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Telegram Bot API URLSKILL.md:365 · Telegram Bot API URL — data will be sent to TelegramFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07HIGH
Telegram Bot API URLSKILL.md:251 · Telegram Bot API URL — data will be sent to TelegramFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07