← Back to Skills Marketplace
samuewalton

Telegram Analyzer

by samuewalton · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
277
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install telegram-analyzer
Description
Search and manage your SaaS Telegram contacts, view recent messages, and update contact stages, tags, or add notes.
Usage Guidance
This skill is inconsistent and contains an embedded token and backend URL that were not declared. Do not install or grant it access until the author explains and fixes these issues: 1) implement all advertised tools or update the SKILL.md to match actual behavior; 2) remove hardcoded secrets and require the token/URL via environment variables or documented config; 3) explain what the backend at http://localhost:8001 is and confirm it is trusted (and verify the token is not a real secret). If you must test, run it in an isolated environment and inspect network calls to ensure no unexpected data leaves your system.
Capability Analysis
Type: OpenClaw Skill Name: telegram-analyzer Version: 1.0.0 The skill is a basic API wrapper for a local service (localhost:8001) with no evidence of malicious intent. It contains a hardcoded development token and an incomplete implementation where tools described in SKILL.md (such as get_recent_messages and contact_action) are missing from index.js, which are functional flaws rather than security threats.
Capability Assessment
Purpose & Capability
The SKILL.md and description advertise three tools (search_contacts, get_recent_messages, contact_action) and full contact/message management. The included code only implements a single tool (search_contacts). The code also hardcodes a BACKEND_URL and AGENT_TOKEN which are not declared as required credentials or config — this is disproportionate and inconsistent with the stated requirements.
Instruction Scope
Runtime instructions refer to tools that are not implemented (get_recent_messages and contact_action). If the agent follows SKILL.md it may attempt to call tools that don't exist, causing failures or unexpected behavior. The SKILL.md scope itself is limited to contact/message operations and does not authorize reading system files, but the mismatch between doc and code is a problem.
Install Mechanism
No install spec is present (instruction-only plus a small code file). Nothing is downloaded or extracted during install, so there is no additional install-time risk.
Credentials
The code embeds a sensitive-looking token (AGENT_TOKEN = "sk_agent_openclaw_dev_12345") and a backend URL (http://localhost:8001/api/v1/agent) but the skill declares no required env vars or credentials. Hardcoding a token and not declaring it is incoherent and increases risk — the skill will send queries (and potentially other data if expanded) to the hardcoded endpoint using that token.
Persistence & Privilege
The skill does not request elevated persistence (always:false). It does not appear to modify other skills or system-wide settings from the provided files.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install telegram-analyzer
  3. After installation, invoke the skill by name or use /telegram-analyzer
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Telegram Analyzer Skill 1.0.0 - Initial release with tools to search contacts, retrieve recent messages, and manage contact details. - Features include contact search by name, phone, or username. - Ability to view the 10 most recent incoming messages. - Support for updating contact stages, tags, or adding notes to contacts.
Metadata
Slug telegram-analyzer
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Telegram Analyzer?

Search and manage your SaaS Telegram contacts, view recent messages, and update contact stages, tags, or add notes. It is an AI Agent Skill for Claude Code / OpenClaw, with 277 downloads so far.

How do I install Telegram Analyzer?

Run "/install telegram-analyzer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Telegram Analyzer free?

Yes, Telegram Analyzer is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Telegram Analyzer support?

Telegram Analyzer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Telegram Analyzer?

It is built and maintained by samuewalton (@samuewalton); the current version is v1.0.0.

💬 Comments