← 返回 Skills 市场
Telegram Alerts
作者
JamieRossouw
· GitHub ↗
· v1.0.1
1372
总下载
0
收藏
9
当前安装
2
版本数
在 OpenClaw 中安装
/install rho-telegram-alerts
功能描述
Send formatted trading alerts, portfolio updates, and market signals via Telegram. Supports price alerts, stop-loss notifications, win/loss reporting, and sc...
安全使用建议
This skill appears to do what it says (send Telegram trading alerts) and legitimately needs a TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID, but the registry metadata does not list those environment variables — that discrepancy is the main red flag. Before using: 1) Ask the publisher to update the manifest to declare required env vars explicitly so reviewers and automated checks see them. 2) Use a dedicated Telegram bot token (do not reuse other tokens), and only give it the minimum permissions; consider creating a bot account just for alerts. 3) Store the token in a secure secret manager rather than plaintext .env if possible. 4) Be aware the agent can send messages autonomously (disable-model-invocation is false); ensure you trust the agent's triggers and the content it may send. 5) If you need stronger assurance, request the author provide explicit runtime commands or a minimal code sample so reviewers can confirm no other data is accessed or transmitted.
功能分析
Type: OpenClaw Skill
Name: rho-telegram-alerts
Version: 1.0.1
The provided files consist solely of metadata (`_meta.json`) and documentation (`SKILL.md`). The `SKILL.md` describes a legitimate skill for sending Telegram alerts and outlines the necessary setup, including the requirement for `TELEGRAM_BOT_TOKEN` and `TELEGRAM_CHAT_ID`. This credential requirement is consistent with the stated purpose of the skill. There is no executable code to analyze, and no evidence of prompt injection, data exfiltration, malicious execution, or other harmful behaviors within the provided content.
能力评估
Purpose & Capability
Name and description claim Telegram trading alerts, which justifies needing a Telegram bot token and chat id. However, the registry metadata declares no required environment variables or primary credential while SKILL.md explicitly says TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID are required — the manifest and runtime instructions are inconsistent.
Instruction Scope
SKILL.md is instruction-only and only describes sending formatted alerts to Telegram and requiring two .env values. It does not instruct reading unrelated files or contacting other external endpoints, but the instructions are terse/vague (no explicit runtime commands) and rely on an out-of-band .env file for secrets.
Install Mechanism
No install spec and no code files — lowest-risk delivery model. Nothing will be downloaded or written by an installer according to the registry.
Credentials
The environment variables referenced in SKILL.md (TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID) are proportionate to sending Telegram messages. The concern is that the registry metadata does not declare these required credentials, so an automated permission review or user expecting a manifest-driven check could miss that secrets are needed or used.
Persistence & Privilege
always:false and no install behavior — the skill does not request permanent/system-level presence. disable-model-invocation is false (agent may call it autonomously), which is normal for skills; combine this with the metadata mismatch when deciding risk tolerance.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install rho-telegram-alerts - 安装完成后，直接呼叫该 Skill 的名称或使用
/rho-telegram-alerts触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Updated formatting in the tags list and YAML frontmatter for improved readability.
- No changes to functionality or features; documentation only update.
v1.0.0
Initial release
元数据
常见问题
Telegram Alerts 是什么？
Send formatted trading alerts, portfolio updates, and market signals via Telegram. Supports price alerts, stop-loss notifications, win/loss reporting, and sc... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1372 次。
如何安装 Telegram Alerts？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install rho-telegram-alerts」即可一键安装，无需额外配置。
Telegram Alerts 是免费的吗？
是的，Telegram Alerts 完全免费（开源免费），可自由下载、安装和使用。
Telegram Alerts 支持哪些平台？
Telegram Alerts 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Telegram Alerts？
由 JamieRossouw（@jamierossouw）开发并维护，当前版本 v1.0.1。
推荐 Skills