Telegram cli
v1.0.5CLI tool for Telegram via MTProto. Send/read messages, manage groups, search conversations, download media, and automate Telegram workflows. Use when the tas...
⭐ 0· 136·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the SKILL.md: it documents the node-telegram-cli npm package and CLI commands for reading/sending messages, managing groups, and downloading media. No unrelated binaries, cloud credentials, or unexpected capabilities are requested.
Instruction Scope
The instructions stay within scope: they instruct installing the npm package, running an interactive login (phone + OTP), and using CLI commands (read/write) with a required --json flag for automation. Notes of interest: session persistence is documented and downloaded media are stored in ~/.telegram-cli/downloads/. The SKILL.md does not instruct reading unrelated system files or exfiltrating data to external endpoints.
Install Mechanism
No install spec in the skill bundle (instruction-only). The SKILL.md recommends installing from npm (npm install -g node-telegram-cli) and references the package and GitHub repo — a standard, traceable public registry installation path.
Credentials
The skill declares no required environment variables or external credentials beyond the Telegram account login (phone + OTP). It states credentials are stored in the OS keychain, which is proportional for a user-level client.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It documents persistent session behavior (session stays logged in until ntg logout) and a local download directory; these are ordinary for a CLI that manages an account, but users should be aware of the persistent session and where files are saved.
Assessment
This skill appears consistent with being a helper for the node-telegram-cli npm package, but before installing consider: (1) you will need to provide your Telegram phone number and OTP — this grants the CLI access to your account, so only use it if you trust the package and owner; (2) verify the npm package and GitHub repo are genuine and actively maintained (check publisher, recent commits, and issues); (3) downloaded media are saved to ~/.telegram-cli/downloads/ — review and clean that directory if needed; (4) the tool can send messages and manage groups, so be careful when automating actions (limit automation scope and confirm commands before running); (5) the CLI stores session data in the OS keychain — ensure you are comfortable with that storage and revoke sessions from Telegram if you suspect misuse. If you need higher assurance, inspect the npm package source locally before installing or run it in an isolated environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97dzdrsd4xt2fmhscnmppqc8x83e07q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.