Telegram History
v1.1.0Fetch Telegram chat message history via MTProto user API (Telethon). Use when needing to read old messages from any Telegram chat, group, or forum topic that...
⭐ 1· 1.8k·14 current·14 all-time
byRahul Sethuram@rhlsthrm
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the two Python scripts all consistently implement a Telethon-based MTProto client for fetching chat history. Requiring api_id/api_hash and a user login (phone + optional 2FA) is expected for this purpose.
Instruction Scope
Runtime instructions only reference creating api_credentials.json and the local session directory under the skill directory and running the included scripts. They do not request unrelated files, environment variables, or external endpoints beyond Telegram and the my.telegram.org app creation site.
Install Mechanism
There is no automated install spec; the SKILL.md asks the user to pip install telethon. No remote downloads or archive extraction are performed by the skill itself.
Credentials
No environment variables or unrelated credentials are requested. The skill asks for api_id/api_hash (Telegram app credentials) and a phone/2FA code — these are necessary for user-mode MTProto access and are proportionate to the stated function.
Persistence & Privilege
The skill stores a Telethon session under session/user inside the skill directory (expected). always:false. Note that if the agent/platform is permitted to invoke the skill autonomously, the skill can read chat history whenever it has access to those local session files and credentials; this is normal but worth noting.
Assessment
This skill appears to do exactly what it says: it uses Telethon and your Telegram app credentials to log in as a user and fetch message history. Before installing/running: (1) Create the Telegram app credentials yourself at my.telegram.org (do not reuse someone else's keys). (2) Understand that api_id/api_hash + the created session file grant access to your Telegram account — treat them like sensitive secrets. (3) Run pip install telethon in an isolated environment (venv) and inspect the included scripts (they are short and readable). (4) If you want to prevent autonomous agent calls, disable model invocation for the skill or ensure the agent cannot call it without explicit approval. (5) To revoke access later, delete the session/ directory and, if necessary, revoke the app from your Telegram account.Like a lobster shell, security has layers — review code before you run it.
latestvk973v1tz2hvebrznjg135jmetd81baqx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.