Publora Telegram

Post or schedule content to Telegram channels and groups using the Publora API. Use this skill when the user wants to publish or schedule Telegram messages v...

This skill appears to be a straightforward Publora→Telegram how-to, but there are important omissions. Before installing or using it: 1) Confirm how the Publora API key (x-publora-key) and your Telegram bot token will be provided and stored — the skill metadata does not declare required env vars, which makes credential handling unclear. 2) Verify whether you need the separate 'publora' core skill (auth/workspace) — the SKILL.md references it but the dependency is not declared. 3) Be cautious when uploading local media: the instructions open local files for upload, so the agent or any helper code will need filesystem access. 4) Only provide your Publora key and bot token to publishers you trust; check Publora's docs and privacy policy for how they handle your bot token and posted content. If the publisher can clarify where credentials are expected (env var name, secure prompt, or external dashboard) and declare the dependency on the publora core skill, the incoherence would be resolved.

Type: OpenClaw Skill Name: publora-telegram Version: 1.2.0 The skill bundle provides legitimate documentation and code examples for integrating the Publora API with Telegram. It includes standard API interaction patterns using JavaScript fetch and Python requests to post or schedule messages, with no evidence of malicious intent, data exfiltration, or prompt injection.