← 返回 Skills 市场
Notify Bot
作者
slk1061569042-lab
· GitHub ↗
· v1.0.0
433
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install notify-bot
功能描述
Send task notifications to specified Telegram bots in a group to activate their sessions and trigger bot actions.
使用说明 (SKILL.md)
notify-bot
向指定 Telegram bot 发送任务通知，激活其群组 session。
用法
notify_bot.sh \x3Cbot_name|bot1,bot2> \x3Cgroup_id> \x3Ctopic_id> \x3Cmessage>
示例
# 通知单个 bot
notify_bot.sh imagebot -1003870994840 11 "生成32x32宝箱图标"
# 通知多个 bot
notify_bot.sh "imagebot,godot,cursor" -1003870994840 3 "任务通知"
工作流程
- notify_bot.sh 发消息到指定群组/话题 → 激活 bot 的 session
- sessions_send 给激活的 session 发指令 → bot 执行任务
注意事项
- Bot token 从 keychain 读取（
openclaw.telegram.\x3Cbot_name>.bot_token） - vision bot 的 key 是
openclaw.telegram.vision.token - 消息发送后不会删除，直接留在群里
- 适用于需要精确控制哪些 bot 被通知的场景
脚本位置
~/.openclaw/shared/notify_bot.sh
安全使用建议
This skill appears to do what it says: it posts messages to Telegram groups to trigger bot sessions. Before installing, verify the following: (1) confirm ~/.openclaw/tools/keychain.sh exists and is from a trusted source — the script invokes that helper to retrieve your bot tokens; if that helper is malicious or compromised it could leak secrets; (2) ensure you are okay with the skill posting visible messages into the target group/topic (messages are not deleted); (3) ensure curl and jq are available on the host (script uses them but doesn't declare them); (4) verify the bot tokens stored under openclaw.telegram.* are limited to the bots you intend to notify and rotate tokens if you have concerns. If any of these points are not acceptable, review or modify the script to meet your security requirements before use.
功能分析
Type: OpenClaw Skill
Name: notify-bot
Version: 1.0.0
The OpenClaw skill 'notify-bot' is designed to send notifications to Telegram bots. The `notify_bot.sh` script correctly retrieves Telegram bot tokens using `~/.openclaw/tools/keychain.sh` and sends messages to the official Telegram Bot API (`https://api.telegram.org/`). There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`. The direct use of the `$MESSAGE` variable in the `curl -d` command is generally safe against shell injection, as `curl` treats the entire string as the value for the `text` parameter. The skill's functionality is clearly aligned with its stated purpose and uses legitimate tools and services.
能力评估
Purpose & Capability
The name/description (notify Telegram bots in a group to activate their sessions) matches the included shell script and SKILL.md. The script posts to the Telegram API using bot tokens and message/thread parameters, which is exactly the stated purpose.
Instruction Scope
SKILL.md and the script instruct the agent to read bot tokens via a local keychain helper (~/.openclaw/tools/keychain.sh) and to run a shell script located at ~/.openclaw/shared/notify_bot.sh. The instructions do not attempt to read unrelated files or contact endpoints other than api.telegram.org, but they implicitly rely on a local keychain helper being present and trusted.
Install Mechanism
No install spec (instruction-only + included script). Nothing downloads arbitrary code from the network. The script will be placed under ~/.openclaw/shared as documented; this is a normal, low-risk install pattern for an instruction-only skill.
Credentials
No environment variables are declared, and no primary credential is listed, yet the script reads secret bot tokens via a local keychain helper (keys named openclaw.telegram.<bot>.bot_token and openclaw.telegram.vision.token). Accessing Telegram bot tokens is proportionate to the skill's purpose, but the use of a keychain helper and undisclosed local config paths should have been declared as required resources. Also the script uses curl and jq but those binaries are not declared as required.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system-wide privileges. It provides a script under ~/.openclaw/shared and exposes a script path in skill.json, which is normal. Autonomous invocation is allowed (platform default) but not combined with other high-risk indicators.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install notify-bot - 安装完成后，直接呼叫该 Skill 的名称或使用
/notify-bot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
初始版本：向指定 Telegram bot 发送任务通知，激活群组 session
元数据
常见问题
Notify Bot 是什么？
Send task notifications to specified Telegram bots in a group to activate their sessions and trigger bot actions. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 433 次。
如何安装 Notify Bot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install notify-bot」即可一键安装，无需额外配置。
Notify Bot 是免费的吗？
是的，Notify Bot 完全免费（开源免费），可自由下载、安装和使用。
Notify Bot 支持哪些平台？
Notify Bot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Notify Bot？
由 slk1061569042-lab（@slk1061569042-lab）开发并维护，当前版本 v1.0.0。
推荐 Skills