telegram-user-mcp

The server uses `telethon` for Telegram API interaction, `python-dotenv` for secure environment variable loading, and stores the session file locally. There is no observed use of `eval` or direct command injection vulnerabilities. A potential concern exists with the `download_media` tool's `save_to` parameter, which accepts an absolute path. A compromised AI could potentially instruct the tool to write files to sensitive system locations or overwrite existing files if the execution environment allows, though the tool itself does not directly execute arbitrary commands.