Telegram Bot Factory

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only Telegram bot development skill with no code or install steps, though users should be mindful that some advertised bot types involve payments, moderation, posting, and user data.

This skill appears safe to install as an instruction-only helper. Before using it for real Telegram bots, especially payment, trading, moderation, subscription, or analytics bots, make sure any generated implementation includes human approval, test environments, secure token handling, audit logs, and rollback controls.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If a user later asks this skill to build and deploy such bots, mistakes or poor safeguards could cause incorrect payment handling, unwanted moderation actions, or unintended public posts.

Why it was flagged

The skill advertises building bots that can automatically confirm payments, moderate groups, and schedule posts. These are purpose-aligned capabilities for Telegram bot development, but they can affect money, communities, or public content if implemented without clear user controls.

Skill content

- 自動確認支付
- Auto-moderation
- 自動post schedule

Recommendation

When using this skill, require explicit approval before deployment or any live automated action, and ask for safeguards such as testing mode, logs, rollback options, rate limits, and clear admin controls.