SZZG007 TalkTrack Telegram

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Telegram sales assistant, but it needs review because it promotes human-like sales automation and persistent/cloud reuse of customer conversations without clear consent, retention, or disclosure controls.

Install only if you intend to use it for reviewed Telegram sales drafting or tightly controlled automation. Before use, require disclosure/human approval for outbound customer messages, use dedicated least-privilege Telegram and Feishu credentials, disable or bound auto-learning/cloud sync, and define how customer conversation data is stored, anonymized, retained, and shared.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Customers or prospects could receive AI-generated sales messages that appear to come from a human sales consultant, which can create trust and disclosure issues.

Why it was flagged

The skill instructs the agent to produce human-like Telegram sales conversations and avoid sounding robotic, without mentioning disclosure that an agent or automation is involved.

Skill content
支持 Telegram 仿真人聊单 ... 自然回复 - 避免机器人式回复 ... 真诚友好 - 像朋友一样聊天
Recommendation

Use this only with clear disclosure or human review for outbound messages, and avoid impersonating a real person or hiding automation from recipients.

What this means

Customer conversations and business data could be stored, reused in future sales scripts, or synced to a cloud service more broadly than intended.

Why it was flagged

The skill describes persistent customer conversation memory, automatic extraction of successful sales scripts, and cloud synchronization, but does not define retention, consent, exclusions, or review boundaries.

Skill content
上下文记忆 - 记住客户历史对话 ... 成功案例学习 - 自动提取高转化话术 ... 云端同步 ... FEISHU_APP_TOKEN=your_app_token
Recommendation

Define allowed data sources, retention periods, anonymization rules, and approval steps before enabling memory, auto-learning, or Feishu synchronization.

What this means

If overly broad or reused credentials are supplied, the skill or connected tooling could access Telegram conversations or Feishu talktrack data beyond the intended scope.

Why it was flagged

The documented configuration uses Telegram and Feishu credentials, which are expected for the stated integration but grant access to messaging and cloud workspace resources.

Skill content
TELEGRAM_BOT_TOKEN=your_bot_token ... TELEGRAM_JUDYMOSS_USER_ID=your_user_id ... FEISHU_APP_TOKEN=your_app_token
Recommendation

Use least-privileged, dedicated credentials; rotate them regularly; and verify exactly which Telegram bot and Feishu table the skill can access.

What this means

Customer rankings, email scripts, or sales tasks could be passed between connected agents in ways the user did not expect.

Why it was flagged

The skill describes sharing CRM, email, and task data with other skills or agents, but the artifact does not specify identity checks, data boundaries, or permissions for those exchanges.

Skill content
szzg007-customer-crm | 读取客户等级 → 匹配话术 ... szzg007-email-business-manager | 同步邮件话术 → 话术库 ... szzg007-multi-agent-orchestrator | 分配任务 → JudyMoss 执行
Recommendation

Only connect trusted companion skills, and document what data each integration may read, write, and forward.