MaxClaw User Guide
PassAudited by ClawScan on May 1, 2026.
Overview
This is a documentation-only MaxClaw guide with no code or install steps; its notable items are disclosed platform features such as persistent memory, scheduled automation, community skill installs, and Telegram bot token setup.
This skill appears safe to install as a guide: it has no code, no install mechanism, and no required credentials. When following the guide, handle Telegram bot tokens carefully, review any community skills before installing them, and remember that MaxClaw platform features such as persistent memory and scheduled automation may retain information or continue running after setup.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If a Telegram bot token is shared with the wrong party, that party may be able to control or read interactions with the bot.
The guide instructs users to handle a Telegram bot token, which is a credential for controlling a Telegram bot. This is expected for Telegram setup and is not used by this skill directly.
Copy the Bot Token (format: `123456789:AABBccdd...`). In MaxClaw, go to **Channel Setup** > **Telegram**, paste Token.
Only paste the token into the official MaxClaw channel setup page, do not share it in chats or logs, and rotate the token through BotFather if it may have been exposed.
Installing additional community skills may expand what the agent can do or what data it can access.
The guide describes installing community skills from a marketplace. This is a disclosed platform feature, but community skills can introduce their own permissions or behavior.
**Skill Marketplace**: One-click install of community skills.
Review each community skill’s source, permissions, and behavior before installing it, especially if it requests credentials, tools, or persistent access.
Information shared with the platform may be reused in later sessions, which can be helpful but may also retain sensitive context longer than expected.
The guide discloses that MaxClaw may retain context and history across sessions. This is purpose-aligned platform documentation, not hidden storage by this skill.
**Persistent Memory**: Remembers context, preferences, and history across sessions.
Avoid storing secrets or unnecessary sensitive information in persistent memory, and use platform controls to review or clear memory where available.
Scheduled automations can keep running, consume credits, or perform actions even when the user is offline.
The guide describes ongoing cloud automation and scheduled tasks. This is clearly disclosed as a MaxClaw feature and not hidden autonomous behavior in the guide itself.
**Always-On**: Runs 24/7 in the cloud, triggers scheduled tasks even when offline.
Review scheduled tasks periodically, disable automations you no longer need, and be careful with tasks that can send messages, install skills, or act on external services.