← Back to Skills Marketplace
112
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install telegram-post
Description
Отправляет текстовые и мультимедийные сообщения в указанные Telegram-группы через OpenClaw CLI с использованием заданного CHAT_ID.
Usage Guidance
Do not install blindly. Review the SKILL.md raw text and remove or rotate any hard-coded secrets (the curl example contains a Telegram bot token). Verify that the OpenClaw CLI and the local gateway referenced are ones you control, and confirm the absolute file paths (/home/larthe/...) map to intended media directories. Prefer skills that declare their required credentials (e.g., BOT_TOKEN) and expect them via environment variables or a secrets manager rather than embedding tokens. If you already used the embedded token, assume it may be compromised: revoke/rotate it and audit the bot's admin privileges. Finally, if you will allow autonomous invocation, restrict the agent's permissions or run it in an isolated account/container to limit access to local files and network endpoints.
Capability Analysis
Type: OpenClaw Skill
Name: telegram-post
Version: 1.0.0
The skill bundle contains a hardcoded Telegram Bot Token (8415787322:AAGK4aQCCGei35g9t2ybKhexlR4BdCZs-3M) and references specific local filesystem paths (/home/larthe/) in SKILL.md. While the stated purpose of posting robotics reports appears legitimate, hardcoding credentials and absolute paths is a significant security risk and suggests the skill is tailored for a specific environment or could be used to interact with unauthorized external endpoints.
Capability Assessment
Purpose & Capability
Name/description match the instructions (sending Telegram messages via OpenClaw CLI). However, the instructions embed a live-looking Telegram bot token in curl examples and reference specific local user paths (/home/larthe/...) and gateway details without declaring any required credentials or configuration. A well-formed Telegram skill would declare a bot token/credential and not hard-code another user's absolute paths.
Instruction Scope
SKILL.md instructs running openclaw and curl commands, listing local media files, and hitting a local gateway (127.0.0.1:18789). It therefore instructs the agent to access local filesystem paths and network endpoints and to use a hard-coded bot token — actions that go beyond simple message formatting and can expose or misuse local files and credentials.
Install Mechanism
No install spec is present (instruction-only), so nothing is written to disk or downloaded by the skill itself. That lowers supply-chain risk, though runtime instructions still invoke local binaries and network calls.
Credentials
The skill declares no required environment variables or primary credential, yet the SKILL.md contains a Telegram bot token in a curl example and references user-specific media directories. This mismatch (no declared credential but visible secret in instructions) is disproportionate and potentially exposes credentials or suggests the skill was copied from another user's environment.
Persistence & Privilege
always is false (good). Autonomous invocation is allowed (platform default). Combined with embedded credentials and local file references, autonomous runs could access local files and call external APIs — increasing blast radius. This is not inherently forbidden but worth considering before enabling autonomous invocation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install telegram-post - After installation, invoke the skill by name or use
/telegram-post - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Telegram Post Skill:
- Send messages, photos, and videos to Telegram groups using OpenClaw CLI.
- Supports posting plain text or media files to specified group IDs.
- Provides command usage examples and group/channel IDs.
- Includes instructions for sending albums (multiple images) via Telegram API.
- Details bot permissions, group policies, and health/status check commands.
Metadata
Frequently Asked Questions
What is Telegram Post?
Отправляет текстовые и мультимедийные сообщения в указанные Telegram-группы через OpenClaw CLI с использованием заданного CHAT_ID. It is an AI Agent Skill for Claude Code / OpenClaw, with 112 downloads so far.
How do I install Telegram Post?
Run "/install telegram-post" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Telegram Post free?
Yes, Telegram Post is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Telegram Post support?
Telegram Post is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Telegram Post?
It is built and maintained by larthe (@larthe); the current version is v1.0.0.
More Skills