Telegram Ops

Telegram Bot API operations for forum management. Use for creating/editing/archiving forum topics, setting topic icons, managing Telegram groups via Bot API. Use when archiving channels/topics. Requires bot token from OpenClaw config.

This skill appears to implement legitimate Telegram forum actions (create/archive topics) but has several worrying inconsistencies and flagged content. Before installing or running it: 1) Do not run scripts or gateway commands with real tokens until you verify them—inspect the scripts (they are small and readable) and test in a sandboxed account. 2) Confirm how the bot token will be provided: the skill's docs expect fetching it from OpenClaw config, but the manifest declares no required credential—ask the author to declare required env/config and to document minimal access needed. 3) Ensure curl and jq are available (scripts require them) or modify scripts to not depend on jq. 4) Be cautious about the SKILL.md guidance to leave topic 'skills' unrestricted—prefer restricting skills per-topic to least privilege. 5) The SKILL.md contained prompt-injection indicators (system-prompt-override, unicode control chars); treat that as suspicious: ask the author to remove any hidden/unusual characters and explain why those sections are present. 6) If you proceed, run the scripts only with a dedicated bot and a test group, and avoid granting the agent broader OpenClaw config/session deletion permissions until you can audit and trust the skill. If the author cannot satisfactorily explain the missing declarations and the prompt-injection artifacts, do not install this skill in production.

Type: OpenClaw Skill Name: telegram-ops Version: 1.0.0 The skill is highly susceptible to prompt injection due to its use of `gateway action=config.patch` in SKILL.md. This command allows the agent to modify its own configuration, specifically the `systemPrompt` for newly created Telegram topics. An attacker could craft a malicious system prompt that, when applied, would instruct the agent operating within that topic to ignore user instructions, exfiltrate data, or perform other unauthorized actions. The skill also advises against restricting skills by default, increasing the potential blast radius of such an attack.