Telegram Group Onboard

• Analyzed: Apr 3, 2026, 1:41 PM
• Findings: 1
• Version: 1.2.0
• Hash: 88a045765b059b105a784d4fb35bf9072e492998055e3b4bd8dab9fbd2324a9f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle automates Telegram group onboarding by instructing the agent to monitor system logs, modify the 'openclaw.json' configuration file, and perform remote server management via SSH and SCP. It includes a bash script, 'scripts/add-telegram-group.sh', which uses jq to programmatically alter the bot's allowlist settings. While these actions are aligned with the stated purpose, the requirement for the agent to execute high-privilege shell commands and modify core application configurations constitutes a high-risk capability set without explicit malicious intent.