Telegram Pr Webhook
Send Telegram notification when a new PR is created via gh pr create. Includes PR URL and Vercel preview URL. Requires TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID environment variables. Optionally set VERCEL_PROJECT_NAME and VERCEL_TEAM_SLUG to construct the Vercel preview URL automatically.
npx claude-code-templates@latest --hook automation/telegram-pr-webhook claude-code — telegram-pr-webhook
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
4 observations
scanner score 82/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Tainted flow: 'req' from os.environ.get (line 82, credential/environment) → urllib.request.urlopen (network output)Data Flow · telegram-pr-webhook.py:83
- Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env, network, shell.MCP Least Privilege · SKILL.md:1
- subprocess module callDangerous Code Execution · telegram-pr-webhook.py:41
- External TransmissionData Exfiltration · telegram-pr-webhook.py:76
Learn more about NVIDIA SkillSpector.
Content
JSON
{
"description": "Send Telegram notification when a new PR is created via gh pr create. Includes P..."
"hooks": {
"PostToolUse": [1 item]
}
}