← Back to Skills Marketplace
Notify Bot
by
slk1061569042-lab
· GitHub ↗
· v1.0.0
433
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install notify-bot
Description
Send task notifications to specified Telegram bots in a group to activate their sessions and trigger bot actions.
README (SKILL.md)
notify-bot
向指定 Telegram bot 发送任务通知，激活其群组 session。
用法
notify_bot.sh \x3Cbot_name|bot1,bot2> \x3Cgroup_id> \x3Ctopic_id> \x3Cmessage>
示例
# 通知单个 bot
notify_bot.sh imagebot -1003870994840 11 "生成32x32宝箱图标"
# 通知多个 bot
notify_bot.sh "imagebot,godot,cursor" -1003870994840 3 "任务通知"
工作流程
- notify_bot.sh 发消息到指定群组/话题 → 激活 bot 的 session
- sessions_send 给激活的 session 发指令 → bot 执行任务
注意事项
- Bot token 从 keychain 读取（
openclaw.telegram.\x3Cbot_name>.bot_token） - vision bot 的 key 是
openclaw.telegram.vision.token - 消息发送后不会删除，直接留在群里
- 适用于需要精确控制哪些 bot 被通知的场景
脚本位置
~/.openclaw/shared/notify_bot.sh
Usage Guidance
This skill appears to do what it says: it posts messages to Telegram groups to trigger bot sessions. Before installing, verify the following: (1) confirm ~/.openclaw/tools/keychain.sh exists and is from a trusted source — the script invokes that helper to retrieve your bot tokens; if that helper is malicious or compromised it could leak secrets; (2) ensure you are okay with the skill posting visible messages into the target group/topic (messages are not deleted); (3) ensure curl and jq are available on the host (script uses them but doesn't declare them); (4) verify the bot tokens stored under openclaw.telegram.* are limited to the bots you intend to notify and rotate tokens if you have concerns. If any of these points are not acceptable, review or modify the script to meet your security requirements before use.
Capability Analysis
Type: OpenClaw Skill
Name: notify-bot
Version: 1.0.0
The OpenClaw skill 'notify-bot' is designed to send notifications to Telegram bots. The `notify_bot.sh` script correctly retrieves Telegram bot tokens using `~/.openclaw/tools/keychain.sh` and sends messages to the official Telegram Bot API (`https://api.telegram.org/`). There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`. The direct use of the `$MESSAGE` variable in the `curl -d` command is generally safe against shell injection, as `curl` treats the entire string as the value for the `text` parameter. The skill's functionality is clearly aligned with its stated purpose and uses legitimate tools and services.
Capability Assessment
Purpose & Capability
The name/description (notify Telegram bots in a group to activate their sessions) matches the included shell script and SKILL.md. The script posts to the Telegram API using bot tokens and message/thread parameters, which is exactly the stated purpose.
Instruction Scope
SKILL.md and the script instruct the agent to read bot tokens via a local keychain helper (~/.openclaw/tools/keychain.sh) and to run a shell script located at ~/.openclaw/shared/notify_bot.sh. The instructions do not attempt to read unrelated files or contact endpoints other than api.telegram.org, but they implicitly rely on a local keychain helper being present and trusted.
Install Mechanism
No install spec (instruction-only + included script). Nothing downloads arbitrary code from the network. The script will be placed under ~/.openclaw/shared as documented; this is a normal, low-risk install pattern for an instruction-only skill.
Credentials
No environment variables are declared, and no primary credential is listed, yet the script reads secret bot tokens via a local keychain helper (keys named openclaw.telegram.<bot>.bot_token and openclaw.telegram.vision.token). Accessing Telegram bot tokens is proportionate to the skill's purpose, but the use of a keychain helper and undisclosed local config paths should have been declared as required resources. Also the script uses curl and jq but those binaries are not declared as required.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system-wide privileges. It provides a script under ~/.openclaw/shared and exposes a script path in skill.json, which is normal. Autonomous invocation is allowed (platform default) but not combined with other high-risk indicators.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install notify-bot - After installation, invoke the skill by name or use
/notify-bot - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
初始版本：向指定 Telegram bot 发送任务通知，激活群组 session
Metadata
Frequently Asked Questions
What is Notify Bot?
Send task notifications to specified Telegram bots in a group to activate their sessions and trigger bot actions. It is an AI Agent Skill for Claude Code / OpenClaw, with 433 downloads so far.
How do I install Notify Bot?
Run "/install notify-bot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Notify Bot free?
Yes, Notify Bot is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Notify Bot support?
Notify Bot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Notify Bot?
It is built and maintained by slk1061569042-lab (@slk1061569042-lab); the current version is v1.0.0.
More Skills