Telegram Bot Manager

Manage and configure Telegram bots for OpenClaw. Use when setting up Telegram integrations, troubleshooting bot connectivity, configuring bot tokens, or managing Telegram channel/webhook settings. Handles bot registration, token validation, and network connectivity checks for api.telegram.org.

This skill appears coherent and implements a standard Telegram setup workflow, but before installing or running it: 1) Review and trust the source — the script will write the bot token into /home/openclaw/.openclaw/openclaw.json (plaintext) and restart the OpenClaw gateway. 2) Back up your OpenClaw config (the script attempts a backup, but verify it) and run in a staging environment first. 3) Provide the token via an environment variable or interactively; avoid pasting tokens into shared logs or VCS. 4) Confirm the machine has the openclaw CLI and Python requests available; the scripts will call openclaw to restart the gateway. 5) After testing, consider rotating the bot token if you exposed it during setup. If you need lower privilege testing, run test_bot.py with a test bot token in a non-production environment to verify connectivity first.

Type: OpenClaw Skill Name: telegram-bot-manager Version: 1.0.0 The skill is classified as suspicious due to its broad permissions and high-risk capabilities, even though they are plausibly needed for its stated purpose. Key indicators include `scripts/setup_bot.py` modifying core OpenClaw configuration (`openclaw.json`) and restarting the gateway, and multiple files (`SKILL.md`, `scripts/setup_bot.py`, `scripts/test_bot.py`) performing external network calls to `api.telegram.org` using sensitive bot tokens. Additionally, `references/WEBHOOK_SETUP.md` provides instructions for highly privileged system operations like installing software (`sudo apt install`), configuring firewalls (`sudo ufw`), and setting up Nginx, which represent significant capabilities if an AI agent were to interpret and execute them.