Notify Bot

Send task notifications to specified Telegram bots in a group to activate their sessions and trigger bot actions.

Security Scan

The skill's actions (posting messages to Telegram to wake bots) match its description, but it omits declaring a few local dependencies and relies on a local keychain helper—review those before installing.

Purpose & Capability

The name/description (notify Telegram bots in a group to activate their sessions) matches the included shell script and SKILL.md. The script posts to the Telegram API using bot tokens and message/thread parameters, which is exactly the stated purpose.

Instruction Scope

SKILL.md and the script instruct the agent to read bot tokens via a local keychain helper (~/.openclaw/tools/keychain.sh) and to run a shell script located at ~/.openclaw/shared/notify_bot.sh. The instructions do not attempt to read unrelated files or contact endpoints other than api.telegram.org, but they implicitly rely on a local keychain helper being present and trusted.

Install Mechanism

No install spec (instruction-only + included script). Nothing downloads arbitrary code from the network. The script will be placed under ~/.openclaw/shared as documented; this is a normal, low-risk install pattern for an instruction-only skill.

Credentials

No environment variables are declared, and no primary credential is listed, yet the script reads secret bot tokens via a local keychain helper (keys named openclaw.telegram.<bot>.bot_token and openclaw.telegram.vision.token). Accessing Telegram bot tokens is proportionate to the skill's purpose, but the use of a keychain helper and undisclosed local config paths should have been declared as required resources. Also the script uses curl and jq but those binaries are not declared as required.

Persistence & Privilege

The skill is not always-enabled and does not request elevated system-wide privileges. It provides a script under ~/.openclaw/shared and exposes a script path in skill.json, which is normal. Autonomous invocation is allowed (platform default) but not combined with other high-risk indicators.

Assessment

This skill appears to do what it says: it posts messages to Telegram groups to trigger bot sessions. Before installing, verify the following: (1) confirm ~/.openclaw/tools/keychain.sh exists and is from a trusted source — the script invokes that helper to retrieve your bot tokens; if that helper is malicious or compromised it could leak secrets; (2) ensure you are okay with the skill posting visible messages into the target group/topic (messages are not deleted); (3) ensure curl and jq are available on the host (script uses them but doesn't declare them); (4) verify the bot tokens stored under openclaw.telegram.* are limited to the bots you intend to notify and rotate tokens if you have concerns. If any of these points are not acceptable, review or modify the script to meet your security requirements before use.

向指定 Telegram bot 发送任务通知，激活其群组 session。

用法

notify_bot.sh <bot_name|bot1,bot2> <group_id> <topic_id> <message>

示例

# 通知单个 bot
notify_bot.sh imagebot -1003870994840 11 "生成32x32宝箱图标"

# 通知多个 bot
notify_bot.sh "imagebot,godot,cursor" -1003870994840 3 "任务通知"

工作流程

1. notify_bot.sh 发消息到指定群组/话题 → 激活 bot 的 session
2. sessions_send 给激活的 session 发指令 → bot 执行任务

注意事项

• Bot token 从 keychain 读取（openclaw.telegram.<bot_name>.bot_token）
• vision bot 的 key 是 openclaw.telegram.vision.token
• 消息发送后不会删除，直接留在群里
• 适用于需要精确控制哪些 bot 被通知的场景

脚本位置

~/.openclaw/shared/notify_bot.sh