← 返回 Skills 市场
Persona Consent Telegram (Hub)
作者
Kanishka Randunu
· GitHub ↗
· v1.0.1
285
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install persona-consent-telegram-hub
功能描述
Gates persona sharing behind explicit Telegram owner approval and connects to persona-service for external chatbots. Use when a user asks for persona, profil...
安全使用建议
This skill appears to do what it says: it sends an approval request via a Telegram bot and only returns the persona file when you approve. Before installing, verify and do the following: 1) You must set TELEGRAM_BOT_TOKEN and TELEGRAM_OWNER_CHAT_ID (use a separate approval bot token as recommended), and set PERSONA_PATH and ALLOWED_PERSONA_PATH to the exact persona file you intend to allow; the registry metadata omits these—do not assume none are required. 2) If you enable persona-service mode, PERSONA_SERVICE_URL and PERSONA_CLIENT_ID (and optional shared secret) will cause the local persona-client to poll an external service and POST persona content after approval—ensure the service URL is trusted. 3) Inspect and understand scripts/request_persona.sh and scripts/persona_client.sh (they are small and included) and confirm TELEGRAM_API_BASE and PERSONA_SERVICE_URL are not set to untrusted hosts. 4) Prefer running the persona-client in the foreground for initial testing so you can observe behavior and logs; consider not using the wrapper until you trust its behavior. 5) Keep bot tokens private and rotate them if you publish any logs/screenshots. If you want stronger assurance, run the scripts in a restricted account or sandbox and review openclaw.json contents before the wrapper is allowed to read it.
功能分析
Type: OpenClaw Skill
Name: persona-consent-telegram-hub
Version: 1.0.1
The skill implements a consent-based gateway for sharing persona files, requiring explicit approval via Telegram. It includes a background polling client (persona_client.sh) to handle requests from an external service and a validation script (request_persona.sh) that interacts with the Telegram Bot API. The code contains robust security controls, such as strict path validation in request_persona.sh (ensuring the requested file matches a pre-configured ALLOWED_PERSONA_PATH) and defensive instructions in SKILL.md to prevent the AI agent from bypassing the consent mechanism. All high-risk behaviors, such as background execution and external network communication, are transparently documented and directly aligned with the skill's stated purpose.
能力评估
Purpose & Capability
The skill implements a Telegram approval flow and an optional persona-service client; the included scripts (bash + python + curl) match that purpose. However the registry metadata declares no required env vars while the README and scripts require TELEGRAM_BOT_TOKEN, TELEGRAM_OWNER_CHAT_ID, PERSONA_PATH, ALLOWED_PERSONA_PATH and (for persona-service) PERSONA_SERVICE_URL and PERSONA_CLIENT_ID. That metadata omission is an inconsistency that could mislead users about required secrets.
Instruction Scope
The SKILL.md and scripts strictly perform the approval flow: send a Telegram approval message to the configured owner bot, poll Telegram getUpdates, and—if approved—read the persona file and return/post it. Scripts validate that PERSONA_PATH equals ALLOWED_PERSONA_PATH and reject otherwise. They do not attempt broad file-system access beyond the persona file, the offset state file, or read-only openclaw.json (used to load configured env).
Install Mechanism
There is no network download or installer; the skill is instruction-only with included scripts and JS/TS source. No external archives or remote installers are used. The wrapper and persona client are local scripts that may be run by the user.
Credentials
The runtime needs sensitive credentials (Telegram bot token and owner chat id) and persona paths, and optionally persona-service credentials and shared secret. Those are proportionate to the feature, but the registry entry incorrectly reports 'no required env vars', creating an information gap. Also several env overrides (TELEGRAM_API_BASE, PERSONA_SERVICE_URL) control external endpoints—misconfiguration could direct data to unintended hosts, so verify those values.
Persistence & Privilege
The skill does not request always:true and does not modify other skills. It may spawn a detached persona_client.sh (wrapper or lifecycle hook) which runs in background and polls the persona-service; this is expected for the optional persona-service mode. The wrapper reads ~/.openclaw/openclaw.json to obtain the skill's env (necessary to get the tokens).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install persona-consent-telegram-hub - 安装完成后，直接呼叫该 Skill 的名称或使用
/persona-consent-telegram-hub触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Fix persona_client.sh KeyError when submitting result; add E2E test and troubleshooting docs (no personal endpoints)
v1.0.0
- Initial release enforcing explicit Telegram owner approval before sharing persona content.
- Integrates with persona-service for handling external chatbot persona requests.
- Only allows persona sharing from the validated local path and strictly denies on timeout, error, or refusal.
- Provides a clear command and approval workflow, ensuring no persona data is leaked without consent.
- Includes optional support for automated consent handling with persona-service integration.
元数据
常见问题
Persona Consent Telegram (Hub) 是什么？
Gates persona sharing behind explicit Telegram owner approval and connects to persona-service for external chatbots. Use when a user asks for persona, profil... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 285 次。
如何安装 Persona Consent Telegram (Hub)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install persona-consent-telegram-hub」即可一键安装，无需额外配置。
Persona Consent Telegram (Hub) 是免费的吗？
是的，Persona Consent Telegram (Hub) 完全免费（开源免费），可自由下载、安装和使用。
Persona Consent Telegram (Hub) 支持哪些平台？
Persona Consent Telegram (Hub) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（linux, darwin）。
谁开发了 Persona Consent Telegram (Hub)？
由 Kanishka Randunu（@kanishkarandunu）开发并维护，当前版本 v1.0.1。
推荐 Skills