ClawHub

Telegram Discord Bot Dev

v1.0.0

Develop custom Telegram and Discord bots with features like trading, gaming, automation, webhook integration, and user engagement analytics.

⭐ 2· 510·0 current·0 all-time
by@katrina-jpg
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description promise building Telegram and Discord bots; SKILL.md describes asking user requirements, suggesting tech, and providing quotes/timelines — consistent with a developer-service skill.
✓
Instruction Scope
Instructions are limited to conversational workflow (ask requirements, propose technology, give pricing). They do not direct the agent to read files, access environment variables, or transmit data to third parties.
ℹ
Install Mechanism
No install spec in registry metadata (instruction-only). SKILL.md includes an example npx command (npx clawhub@latest install telegram-discord-bot-dev) which, if run by a user, would fetch remote npm code — that's normal for user-side installs but worth verifying the npm package before running.
ℹ
Credentials
The skill does not declare or request any credentials, which keeps it low-privilege. Practical caveat: deploying real Telegram/Discord bots requires service tokens (bot tokens) and occasionally hosting credentials; the SKILL.md does not mention these operational needs or how to handle them, so users should expect to provide such secrets when actually building/deploying bots.
✓
Persistence & Privilege
Skill does not request persistent presence (always:false) and does not modify system or other skills' configs; no elevated privileges are requested.
Assessment
This skill appears coherent and low-privilege, but before proceeding: (1) Do not run the suggested npx command without checking the npm package (clawhub) and its source — npx will download and execute remote code. (2) Expect that building and deploying actual bots will require Telegram and Discord bot tokens and possibly hosting/API credentials; only share those secrets with people or services you trust and use least-privilege tokens. (3) Ask the developer for a code repository, license, and data-handling/privacy practices before hiring. (4) If you must run unfamiliar install commands, do so in an isolated environment (container or throwaway VM). If the SKILL.md later includes automated scripts that request credentials or read system files, re-evaluate immediately.

Like a lobster shell, security has layers — review code before you run it.

latestvk976nbhf800hjs7knacsj4yj4h81eb0q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments