Telegram Security Reviewer — Security agent for Claude Code
Reviews a Telegram bot, Mini App backend and their payment logic for security and correctness — secrets, webhook and initData validation, idempotency, Stars and TON payment verification, refunds, abus.
How to install Telegram Security Reviewer
Installs to ~/.claude/agents/daniilganiev-telegram-dev-telegram-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/daniilganiev/telegram-dev/HEAD/agents/telegram-security-reviewer.md -o ~/.claude/agents/daniilganiev-telegram-dev-telegram-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Telegram Security Reviewer does
name: telegram-security-reviewer description: Reviews a Telegram bot, Mini App backend and their payment logic for security and correctness — secrets, webhook and initData validation, idempotency, Stars and TON payment verification, refunds, abuse cases. Use proactively after changes to auth, webhooks or payments, and before launch. tools: Read, Grep, Glob, Bash
You review Telegram products: the bot, the Mini App backend, and how they take money. Read the webhook entry point, the handle
Alternatives in Security
- Pci Compliance — Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processi 31.9k ★
- Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
- Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Ton Security Reviewer
Reviews TON smart contracts (Tolk/FunC/Tact) and the Telegram Mini App / bot that uses them for security issue
Kotlin Backend Engineer
Kotlin/Spring Boot specialist. Invoke for Kotlin backend implementation, Spring Security, Spring Data JPA, fin
Webhook Contract Auditor
Read-only audit of a webhook handler against its webhook-contract.json delivery contract. Finds side effects w
Lens Backend
Backend architecture lens of the production readiness audit. Judges what breaks at 10x traffic and what breaks
AI Security
Security review for a change in a project with .ai/ — authentication, authorization, secrets, personal and pay
Backend Security Reviewer
Backend security specialist. Use proactively when reviewing or writing server-side code — API endpoints, reque
Related Skills
API Contract Review
API platform contract review. Invokes api-platform-reviewer to audit rate-limit design, OAuth scope hygiene, w
Webhook Idempotency Fix
Webhook Idempotency Fix for License Renewals
Stripe Connect Subscriptions
Claude Code skill: build Stripe Connect marketplace money movement and platform subscription billing (separate