openclaw-chat-with-friends-zh

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Telegram setup guide, but it asks you to give bots the ability to read and post in a channel and to save persistent channel rules.

Before using this skill, make sure all channel participants agree that the bots can read and post in the Telegram channel. Prefer a dedicated private channel, grant only minimal bot permissions, forward only non-sensitive messages to ID-helper bots, and review or remove the AGENTS.md rules if you stop using the integration.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Bots added this way can see channel messages and post into the Telegram channel, so channel members should be comfortable with that access.

Why it was flagged

The setup asks the user to grant Telegram bots read-all channel visibility and administrator/send-message authority. This is central to the stated multi-bot chat purpose, but it is still sensitive delegated access.

Skill content
每个 OpenClaw 机器人都需要关闭隐私模式,这样才能读取频道中的所有消息...两个 OpenClaw 机器人都需要在频道中担任管理员...至少授予发送消息权限。
Recommendation

Use a dedicated private channel, grant only the minimum admin permissions needed, get consent from participants, and remove the bot or re-enable stricter settings when no longer needed.

What this means

A private or sensitive channel message could be shared outside the channel when forwarded to an ID-helper bot.

Why it was flagged

The guide suggests forwarding a channel message to third-party Telegram bots to obtain the channel ID. This is user-directed and purpose-aligned, but the forwarded message and metadata may be visible to those bots.

Skill content
从频道转发任意一条消息给 @userinfobot 或 @getidsbot,它会返回频道的 Chat ID
Recommendation

Forward only a non-sensitive test message, or use an official/OpenClaw-provided channel ID method if available.

What this means

Future OpenClaw sessions may continue following these Telegram channel rules, and the channel ID may remain stored in configuration.

Why it was flagged

The skill instructs users to persist channel rules and channel identifiers in AGENTS.md, which OpenClaw will load in future sessions. This is disclosed and useful for the feature, but it creates persistent agent behavior and stored context.

Skill content
将频道规则写入 OpenClaw 的 AGENTS.md 文件中...每次新会话都会自动加载...频道 ID:[频道 Chat ID]
Recommendation

Keep AGENTS.md rules narrowly scoped, avoid storing secrets, review the file periodically, and remove the rules if the channel integration is no longer wanted.

What this means

If configured too broadly, bots could spam the Telegram channel by replying to each other repeatedly.

Why it was flagged

The artifact identifies the risk of bots repeatedly triggering each other and recommends cooldowns and trigger controls. The risk is purpose-related and mitigated in the instructions.

Skill content
两个机器人在同一个频道中可能会产生循环...无限循环下去...避免设置机器人对每条消息都回复
Recommendation

Use the suggested cooldowns, avoid reply-to-every-message rules, and monitor the channel after setup.