Back to plugin

Security audit

ClawRich - Telegram Rich Messages

Security checks for vulnerabilities and agentic risk

Overview

This package does what it says, but it gives agents live authority to send Telegram messages to arbitrary chats using an existing bot token without built-in confirmation or destination scoping.

Install only if you are comfortable giving this plugin access to your configured Telegram bot token and letting agents send messages to Telegram. Use it with explicit user approval, restrict which agents can call it, prefer dry_run for review, and avoid passing secrets or untrusted raw HTML/Markdown into messages.

Static analysis

No suspicious patterns detected.