# Telegram Mini App Release Gate

> Use for Telegram work when Codex should validate Mini App HTTPS, bot configuration, auth, UI states, analytics, security, and rollback readiness.

- Skill: `srednoff888-art/telegram-mini-app-release-gate` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add srednoff888-art/telegram-mini-app-release-gate`
- Raw SKILL.md: https://api.skillmd.com/api/skills/srednoff888-art/telegram-mini-app-release-gate/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: srednoff888-art (https://skillmd.com/u/srednoff888-art)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/srednoff888-art/telegram-mini-app-release-gate

---


# telegram mini app release gate

## Workflow

1. Confirm the business outcome, owner, source data, constraints, and success metric.
2. Inspect the project and available account or analytics evidence before proposing changes.
3. Use official documentation for current platform behavior and retain source provenance.
4. Produce an evidence-backed plan with assumptions, dependencies, and measurable validation.
5. Run only read-only diagnostics by default; gate external, paid, production, or publishing actions behind explicit approval.

## Domain Focus

validate Mini App HTTPS, bot configuration, auth, UI states, analytics, security, and rollback readiness.

## Official Sources

https://core.telegram.org/bots/webapps | https://core.telegram.org/bots/api

## Guardrails

- Treat initDataUnsafe and browser-provided user identity as untrusted.
- Validate initData on the server, enforce a bounded auth_date lifetime, and never expose bot tokens.
- Require explicit approval for payments, messages, production bot settings, or externally visible launches.