Skillget

tg-push

skill
Security Audit
Pass
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 14 GitHub stars
Code Pass
  • Code scan — Scanned 2 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This is a single-shot command-line utility for sending text messages, images, or videos directly to a specified Telegram chat. It acts as a simple, one-way notification tool without running a persistent server or polling loop.

Security Assessment
Overall risk: Low. The tool requires your Telegram Bot Token and Chat ID via standard environment variables, meaning you must handle those credentials securely on your system. There are no hardcoded secrets, no dangerous permissions requested, and no evidence of shell command execution. However, it inherently makes outbound network requests to the Telegram API to deliver messages. A code scan of its two files found no dangerous patterns. The code relies entirely on the Python standard library, which significantly reduces the risk of hidden vulnerabilities often found in third-party dependencies.

Quality Assessment
The project is highly lightweight and uses zero external runtime dependencies. It is actively maintained, with repository updates pushed as recently as today. It uses the permissive MIT license and holds a small but positive community trust signal with 14 GitHub stars. The documentation is clear, concise, and accurately outlines the required setup and expected behavior.

Verdict
Safe to use.
SUMMARY

Single-shot CLI for sending text plus an optional image or video to Telegram.

README.md

tg-push

Python CLI for sending text plus an optional image or video to Telegram.

There is no bot polling loop, no MCP bridge, and no long-running server, just simple one-way messages.

Install

pip install tg-push

Or with pipx for an isolated install:

pipx install tg-push

Environment

Variable Required Description
TG_BOT_TOKEN yes Telegram bot token from @BotFather
TG_CHAT_ID yes Target chat ID or @channelusername

For a 1:1 bot chat, TG_CHAT_ID is your Telegram user id. For groups and channels, use the actual chat id instead.

Usage

tg-push --text "build finished"
tg-push --file ./render.png
tg-push --text "latest render" --file ./render.png

Behavior

  • At least one of --text or --file is required.
  • If --file is present, the tool auto-detects image vs video from the file extension.
  • Supported image extensions: .jpg, .jpeg, .png, .webp
  • Supported video extensions: .mp4, .mov, .m4v, .webm, .mkv, .avi
  • If --text is longer than Telegram's media caption limit, the file is sent first and the text is sent as follow-up messages.
  • The project has no runtime dependencies outside the Python standard library.

Reviews (0)

No results found