← Back to Skills Marketplace
130
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install skylv-cross-platform-bot-builder
Description
跨平台 Bot 生成器。一键生成 Telegram/微信/抖音/Discord Bot，统一 API，多平台部署。Triggers: bot builder, telegram bot, wechat bot, discord bot, multi-platform bot.
Usage Guidance
This skill appears to be a legitimate cross-platform bot framework, but it references many platform tokens and an npm package without declaring them. Before installing or running any commands (npx bot-builder, installing @skylv/bot-builder, or providing tokens), do the following:
- Verify the npm package and its publisher: search for '@skylv/bot-builder' on npm, inspect its source repository, release history, and maintainers. Do not run npx against an unverified package.
- Treat all platform tokens (Telegram/Discord/WeChat/Douyin etc.) as sensitive: use least-privilege tokens, rotate them, and prefer scoped or test accounts. Do not paste production tokens into untrusted shells or services.
- Because the skill metadata declares no required env vars, ask the skill author to explicitly list required credentials and scopes (and why each is needed). The inconsistency increases risk.
- Run initial experiments in an isolated environment (ephemeral machine, container) with non-production tokens, and inspect any generated project files before starting services.
- If you plan to deploy (Docker, Vercel), review generated Dockerfiles and serverless configs for unexpected network calls or secrets baked into images.
If you cannot validate the upstream package/source, treat this skill as untrusted and avoid running its automated install (npx / npm) or providing high-privilege credentials.
Capability Analysis
Type: OpenClaw Skill
Name: skylv-cross-platform-bot-builder
Version: 1.0.3
The skill bundle appears to be a documentation-focused template or guide for a cross-platform bot builder utility. The provided files (_meta.json and SKILL.md) contain metadata, usage examples for various bot platforms (Telegram, Discord, WeChat), and descriptions of tool functions for project creation and deployment. No executable code, malicious payloads, or prompt injection attempts were found; the instructions are consistent with the stated purpose of automating bot development.
Capability Assessment
Purpose & Capability
Name/description and the SKILL.md content are consistent: it is a cross-platform bot generator with adapters and deployment guidance for Telegram, Discord, WeChat, Douyin, Slack, WhatsApp, etc. The examples, adapters, and deployment instructions fit the stated purpose.
Instruction Scope
SKILL.md contains runnable examples and configuration that reference local files (.env, config/platforms.json, src/, package.json) and many environment variables (TELEGRAM_BOT_TOKEN, DISCORD_BOT_TOKEN, WECHAT_APP_ID, WECHAT_AES_KEY, etc.). The skill registry declares no required env vars — the instructions therefore rely on secrets/config not declared by the skill. The file does not explicitly tell the agent to exfiltrate data, but it presumes access to credentials and local config which the skill did not advertise.
Install Mechanism
This is an instruction-only skill with no install spec and no bundled code. That minimizes direct install risk. However the examples instruct using npx (npx bot-builder) and an npm package '@skylv/bot-builder' — running npx against an unverified package carries risk; the skill itself does not include or fetch code.
Credentials
The documentation expects many platform credentials and secrets (bot tokens, app secrets, AES keys), but the skill metadata declares no required environment variables or primary credential. Requesting or using multiple high-sensitivity secrets (messaging tokens, app secrets) is expected functionally for a bot framework, but the omission in metadata is an incoherence and increases risk because the agent/user may not be warned which secrets will be accessed or needed.
Persistence & Privilege
Skill is not always-enabled, does not request system paths, and has no install step that modifies agent/system configuration. Autonomous invocation is allowed (default) but is not combined with other privilege escalations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skylv-cross-platform-bot-builder - After installation, invoke the skill by name or use
/skylv-cross-platform-bot-builder - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Updated SKILL.md version from 1.0.1 to 1.0.2
- Simplified and clarified the description field in SKILL.md
- No functional or code changes; documentation only
v1.0.2
- Updated SKILL.md documentation
- Changed version number from 1.0.0 to 1.0.1 in metadata
- No changes to code or functionality; this is a documentation update only
v1.0.1
- Added new frontmatter fields: keywords and triggers for enhanced discoverability and integration.
- Appended a "Usage" section at the end with simple, clear instructions to install, configure, and run the skill.
- No changes to core functionality or APIs.
v1.0.0
Initial release of Cross-Platform Bot Builder.
- One-click creation of bots for Telegram, WeChat, Douyin, Discord, Slack, WhatsApp (testing), and more, with unified API and multi-platform deployment.
- Supports message handling, command responses, media sending, user management, and event handling.
- Provides CLI, code, and config file ways to generate new bot projects.
- Includes modular adapters for each platform with support for platform-specific features.
- Offers deployment guides for Docker and serverless platforms.
- Adds utility functions for bot creation, deployment, and performance analysis.
- Chinese/English documentation and example code.
Metadata
Frequently Asked Questions
What is Skylv Cross Platform Bot Builder?
跨平台 Bot 生成器。一键生成 Telegram/微信/抖音/Discord Bot，统一 API，多平台部署。Triggers: bot builder, telegram bot, wechat bot, discord bot, multi-platform bot. It is an AI Agent Skill for Claude Code / OpenClaw, with 130 downloads so far.
How do I install Skylv Cross Platform Bot Builder?
Run "/install skylv-cross-platform-bot-builder" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skylv Cross Platform Bot Builder free?
Yes, Skylv Cross Platform Bot Builder is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skylv Cross Platform Bot Builder support?
Skylv Cross Platform Bot Builder is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skylv Cross Platform Bot Builder?
It is built and maintained by SKY-lv (@sky-lv); the current version is v1.0.3.
More Skills