openclaw-version-monitor

监控 OpenClaw GitHub 版本更新，获取最新版本发布说明，翻译成中文， 并推送到 Telegram 和 Feishu。用于：(1) 定时检查版本更新 (2) 推送版本更新通知 (3) 生成中文版发布说明

This skill describes exactly what you might expect for a release-monitor notifier, but it leaves out key operational details and contains a hardcoded external Telegram chat ID. Before installing or enabling it, consider the following: - Authentication: The skill does not request a Telegram bot token or Feishu webhook/credentials. You will need to supply these yourself (and preferably via environment variables) for pushes to work. Do not rely on any preexisting/global credentials. - Hardcoded recipient: The SKILL.md includes a Telegram Chat ID (8290054457). That means if the skill is run as-is it might attempt to send messages to that ID (if a token is provided elsewhere). Replace any hardcoded recipient with your own chat/group ID to avoid inadvertently notifying a third party. - Binaries and runtime: The instructions use curl and jq but the skill declares no required binaries. Ensure your agent runtime has curl and jq (or adapt commands) and decide where the skill will store the last-seen version (file, datastore, or agent state) so comparisons work. - Translation: The skill defines translation rules but does not specify a translation engine or API. If you want machine translation, decide whether to use the agent's model or an external translation API and secure any needed keys. - Cron/scheduling: The SKILL.md suggests cron expressions but doesn't provide a deployment/install path for scheduling. Plan how you will run this periodically (system cron, workflow runner, or platform scheduler). If you cannot verify or control the Telegram/Feishu endpoints and credentials, or if you do not trust the hardcoded recipient, treat this skill as risky and do not install it. To make it safer, require that the skill explicitly declare and use environment variables for credentials, remove hardcoded recipient IDs from templates, and provide clear storage instructions for last-seen version/state.

Type: OpenClaw Skill Name: openclaw-version-monitor Version: 1.0.0 The skill contains a hardcoded Telegram Chat ID (8290054457) in SKILL.md and references/push-templates.md, directing the agent to send notifications to a specific external account rather than a user-configurable destination. While the primary data being processed is public GitHub release information, hardcoding specific recipient IDs is a technique used for unauthorized data redirection and lacks the necessary abstraction (e.g., environment variables) for a safe, multi-user skill.