Telegram Bot Builder
v1.0.0Telegram Bot 快速build工具 - Keyboard、Inline Buttons、Webhook、Auto-reply、Group管理
⭐ 0· 1.8k·16 current·17 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Telegram bot builder) matches the SKILL.md content: BotFather, keyboards, webhooks, auto-reply and group management are all relevant and present. Nothing in the manifest asks for unrelated access.
Instruction Scope
SKILL.md contains only high-level guidance and example JSON for inline keyboards plus use cases and basic error handling. It does not instruct the agent to read arbitrary files, access unrelated system state, or transmit data to unexpected endpoints.
Install Mechanism
No install spec and no code files — instruction-only. There is nothing written to disk or downloaded by the skill itself.
Credentials
The skill declares no required environment variables or credentials, which is consistent with being instruction-only. Note: in practice building a Telegram bot requires a Bot token (from BotFather) and possibly other API keys (for payments or exchange integrations). The skill does not document or request where those secrets should be stored, which is a transparency/usability omission but not an active risk in the skill manifest itself.
Persistence & Privilege
always is false and there are no special persistence or system-wide config changes. disable-model-invocation is false (normal), so the agent may call the skill autonomously — expected for skills and not a problem here.
Assessment
This skill is a short, high-level guide for building Telegram bots and appears coherent. Before using it: (1) expect the agent or the bot code to request your Telegram BOT_TOKEN — never paste tokens into public chat; store them in your platform's secret manager. (2) If you implement payments or a crypto trading bot, those will require additional API keys and have real financial risk — use least-privilege API keys and test in sandboxes. (3) Because the skill is instruction-only, it won't install code for you; if you follow its advice, review any third-party libraries or deployment steps you use. (4) If you plan to let an autonomous agent act with these instructions, limit its permissions and review any outgoing webhook URLs or integrations before enabling them.Like a lobster shell, security has layers — review code before you run it.
latestvk9737ck2kzt3qz9164fv9v865981f8wt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.