Telegram Bot Manager

• Analyzed: May 12, 2026, 3:24 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4a061d7db9fd64d7888fb67917da5bd8a669e301c989f99a5bb8264d47562f3a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its broad permissions and high-risk capabilities, even though they are plausibly needed for its stated purpose. Key indicators include `scripts/setup_bot.py` modifying core OpenClaw configuration (`openclaw.json`) and restarting the gateway, and multiple files (`SKILL.md`, `scripts/setup_bot.py`, `scripts/test_bot.py`) performing external network calls to `api.telegram.org` using sensitive bot tokens. Additionally, `references/WEBHOOK_SETUP.md` provides instructions for highly privileged system operations like installing software (`sudo apt install`), configuring firewalls (`sudo ufw`), and setting up Nginx, which represent significant capabilities if an AI agent were to interpret and execute them.