← 返回 Skills 市场
Telegram Analyzer
作者
samuewalton
· GitHub ↗
· v1.0.0
277
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install telegram-analyzer
功能描述
Search and manage your SaaS Telegram contacts, view recent messages, and update contact stages, tags, or add notes.
安全使用建议
This skill is inconsistent and contains an embedded token and backend URL that were not declared. Do not install or grant it access until the author explains and fixes these issues: 1) implement all advertised tools or update the SKILL.md to match actual behavior; 2) remove hardcoded secrets and require the token/URL via environment variables or documented config; 3) explain what the backend at http://localhost:8001 is and confirm it is trusted (and verify the token is not a real secret). If you must test, run it in an isolated environment and inspect network calls to ensure no unexpected data leaves your system.
功能分析
Type: OpenClaw Skill
Name: telegram-analyzer
Version: 1.0.0
The skill is a basic API wrapper for a local service (localhost:8001) with no evidence of malicious intent. It contains a hardcoded development token and an incomplete implementation where tools described in SKILL.md (such as get_recent_messages and contact_action) are missing from index.js, which are functional flaws rather than security threats.
能力评估
Purpose & Capability
The SKILL.md and description advertise three tools (search_contacts, get_recent_messages, contact_action) and full contact/message management. The included code only implements a single tool (search_contacts). The code also hardcodes a BACKEND_URL and AGENT_TOKEN which are not declared as required credentials or config — this is disproportionate and inconsistent with the stated requirements.
Instruction Scope
Runtime instructions refer to tools that are not implemented (get_recent_messages and contact_action). If the agent follows SKILL.md it may attempt to call tools that don't exist, causing failures or unexpected behavior. The SKILL.md scope itself is limited to contact/message operations and does not authorize reading system files, but the mismatch between doc and code is a problem.
Install Mechanism
No install spec is present (instruction-only plus a small code file). Nothing is downloaded or extracted during install, so there is no additional install-time risk.
Credentials
The code embeds a sensitive-looking token (AGENT_TOKEN = "sk_agent_openclaw_dev_12345") and a backend URL (http://localhost:8001/api/v1/agent) but the skill declares no required env vars or credentials. Hardcoding a token and not declaring it is incoherent and increases risk — the skill will send queries (and potentially other data if expanded) to the hardcoded endpoint using that token.
Persistence & Privilege
The skill does not request elevated persistence (always:false). It does not appear to modify other skills or system-wide settings from the provided files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install telegram-analyzer - 安装完成后，直接呼叫该 Skill 的名称或使用
/telegram-analyzer触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Telegram Analyzer Skill 1.0.0
- Initial release with tools to search contacts, retrieve recent messages, and manage contact details.
- Features include contact search by name, phone, or username.
- Ability to view the 10 most recent incoming messages.
- Support for updating contact stages, tags, or adding notes to contacts.
元数据
常见问题
Telegram Analyzer 是什么？
Search and manage your SaaS Telegram contacts, view recent messages, and update contact stages, tags, or add notes. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 277 次。
如何安装 Telegram Analyzer？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install telegram-analyzer」即可一键安装，无需额外配置。
Telegram Analyzer 是免费的吗？
是的，Telegram Analyzer 完全免费（开源免费），可自由下载、安装和使用。
Telegram Analyzer 支持哪些平台？
Telegram Analyzer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Telegram Analyzer？
由 samuewalton（@samuewalton）开发并维护，当前版本 v1.0.0。
推荐 Skills