← Back to Skills Marketplace
342
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install tg-notify
Description
tg-notify
Usage Guidance
This skill will read your Telegram bot token from ~/.openclaw/openclaw.json and use it to send messages via the Telegram Bot API. That file contains a sensitive credential — the skill did not declare this config path or a required credential. Before installing, verify you trust the skill's source and that you want it to access that local file. Safer alternatives: ask the author to (a) declare the config path or require an env var in the registry metadata, or (b) allow providing a token explicitly instead of reading your home directory. Inspect ~/.openclaw/openclaw.json yourself to confirm what the skill would read, ensure file permissions are tight, and consider creating a dedicated bot/token with minimal scope for this use. If you do not want any skill to access local secrets, do not install this skill.
Capability Analysis
Type: OpenClaw Skill
Name: tg-notify
Version: 1.0.3
The skill sends Telegram notifications by reading a bot token from the local `~/.openclaw/openclaw.json` file and executing `curl` commands. While the functionality aligns with its stated purpose, the use of shell commands with dynamic placeholders for user-provided messages and IDs poses a risk of command injection. Additionally, the skill requires high-privilege access to sensitive configuration files to retrieve credentials.
Capability Assessment
Purpose & Capability
The skill claims to send Telegram notifications and its instructions use the Telegram Bot API via curl — this aligns with the stated purpose. It also depends on node and curl (metadata), which is reasonable for the shown commands.
Instruction Scope
The SKILL.md explicitly instructs the agent to read a bot token from the user's ~/.openclaw/openclaw.json via a node one-liner and then POST messages to api.telegram.org. Reading a local config file containing a secret is broader scope than the skill's declared requirements (which list no config paths or env vars). The instructions therefore access sensitive local state not declared in the registry metadata.
Install Mechanism
Instruction-only skill with no install spec or code files — no code is written to disk by the skill itself, which is lower risk from installation mechanics.
Credentials
No required env vars or config paths are declared, yet the runtime steps require reading a Telegram BOT_TOKEN from ~/.openclaw/openclaw.json. That file contains a secret token (sensitive) and should have been declared as required input or the skill should accept a provided token instead. The metadata does list node and curl as needed, which is appropriate.
Persistence & Privilege
The skill is not forced always-on and does not request system-wide persistence. It does not attempt to modify other skills or global config in the instructions provided.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tg-notify - After installation, invoke the skill by name or use
/tg-notify - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Expanded the skill description to clarify purpose and common use cases.
- Added example trigger phrases (in English and Russian) to the description for easier discovery.
- No changes to code or functionality; documentation update only.
v1.0.2
- Description in SKILL.md shortened to "tg-notify".
- All example usage instructions and content about features remain unchanged.
v1.0.1
- Added metadata section to SKILL.md with emoji and required binaries.
- Removed the _meta.json file.
- Documentation and usage instructions in SKILL.md remain otherwise unchanged.
v1.0.0
Send Telegram notifications via bot; token read dynamically from openclaw.json
Metadata
Frequently Asked Questions
What is Tg Notify?
tg-notify. It is an AI Agent Skill for Claude Code / OpenClaw, with 342 downloads so far.
How do I install Tg Notify?
Run "/install tg-notify" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tg Notify free?
Yes, Tg Notify is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tg Notify support?
Tg Notify is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tg Notify?
It is built and maintained by AgohpAI (@agohpai); the current version is v1.0.3.
More Skills