polakowo/gpt2bot: source audit, 2026-10-10
Read from the source at commit b3a1536e157c; the bot was not run (it needs a BotFather token). Each answer cites the file and line that shows it. All 20 bots
In short
Anyone who messages the bot gets replies generated on your CPU or GPU; there is no way to restrict users without editing the code. The token goes into a tracked config file, so do not commit your edited copy.
What the source shows
| Answer | Where | |
|---|---|---|
| Who can use it | Has no allowlist at all: anyone who finds the bot can use it | gpt2bot/telegram_bot.py:231 — MessageHandler(Filters.text, ...) with no user filter |
| With no allowlist set | no access setting exists | gpt2bot/telegram_bot.py:191-192 — the only startup check is that telegram_token is set |
| What it can do | Chat only | local text generation plus a GIPHY call; no shell or tool execution |
| Bot token | Read from the environment or a config file; no real token is committed | |