Telegram Bot Builder

• Analyzed: May 12, 2026, 3:10 AM
• Findings: 1
• Version: 1.0.0
• Hash: 2ed2e993e2beafd3c96b65c45740e2064831d20dcf4d1f34361855809c2b2f3e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'telegram-bot' is benign. It provides standard `curl` commands and a bash script to interact with the legitimate Telegram Bot API (api.telegram.org). The skill transparently requires `jq`, `curl`, and the `TELEGRAM_BOT_TOKEN` environment variable, which are all necessary for its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the AI agent. All actions are clearly aligned with building and managing Telegram bots.