π¦ ClawHub
Telegram Mini App Security Auditor
by @zack-dev-cm
Audit Telegram Mini App projects for launch safety before connecting bot tokens or public channels. Use when Codex needs to review a Telegram WebApp/Mini App...
π‘ Examples
Run the static auditor from the skill folder:
python3 {baseDir}/scripts/audit_tma.py \
/path/to/project \
--out-dir /tmp/tma-audit
Expected outputs:
tma_security_audit.jsontma_security_audit.mdDecision meanings:
PASS: no blocking or review-triggering evidence found by this static pass.REVIEW: launch only after a human verifies the listed risks.BLOCK: do not launch or connect production bot tokens until fixed.TERMINAL
clawhub install telegram-miniapp-security-auditor