← 返回 Skills 市场
228
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install telegram-openapi-skill
功能描述
Operate Telegram Bot API through UXC with a curated OpenAPI schema, bot-token path auth, polling-based reads, and webhook management guardrails.
安全使用建议
This skill looks like a genuine Telegram Bot API wrapper for uxc, but note two practical issues before installing: (1) you must provide a Telegram bot token (TELEGRAM_BOT_TOKEN) via your environment/uxc credential binding—registry metadata didn't declare that, so configure it manually; (2) the docs contradict each other about local multipart uploads—if you intend to use file uploads, assume the skill can read user-specified local files when you call sendPhoto/sendDocument, so avoid passing paths to sensitive files. Also ensure you trust the uxc tool and the raw.githubusercontent.com schema URL before creating links or bindings.
功能分析
Type: OpenClaw Skill
Name: telegram-openapi-skill
Version: 1.0.1
The telegram-openapi-skill bundle provides a legitimate interface for interacting with the Telegram Bot API using the uxc tool. It includes a curated OpenAPI schema (references/telegram-bot.openapi.json), clear authentication setup instructions using environment variables, and explicit security guardrails in SKILL.md that require user confirmation for high-risk write operations. The validation script (scripts/validate.sh) and usage patterns are consistent with the stated purpose of bot management and message delivery.
能力评估
Purpose & Capability
The skill's name/description match its behavior: it wraps Telegram Bot API calls via uxc and a curated OpenAPI schema. Requested capabilities (polling, webhook management, sendMessage/sendPhoto/sendDocument) are consistent with a Telegram bot integration. However, the registry metadata lists no required environment variables or primary credential even though the SKILL.md clearly instructs using a TELEGRAM_BOT_TOKEN credential—this metadata omission is an inconsistency.
Instruction Scope
SKILL.md confines runtime actions to calling api.telegram.org via uxc and local multipart uploads when explicitly requested. It does not instruct reading unrelated system secrets or exfiltrating data to third-party endpoints. Two documentation contradictions are present: one line states some media endpoints 'accept file_id or HTTP URL only; they do not upload new local files', and a nearby line states sendPhoto/sendDocument 'also support multipart/form-data local file uploads'. That is a documentation coherence issue that should be clarified because supporting local file uploads means the skill can access user-specified local files.
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded or written to disk by default. The only code file is a validation script; it is harmless and intended to run developer-side. The SKILL.md expects uxc on PATH but does not install any binaries itself.
Credentials
The runtime instructions require a single bot credential (TELEGRAM_BOT_TOKEN) configured via uxc auth binding, which is proportionate to the stated purpose. The registry metadata, however, declares no required env vars or primary credential—this mismatch should be corrected so installers know a secret is required. Aside from the bot token, the skill does not request unrelated credentials.
Persistence & Privilege
The skill is not marked always:true and does not request elevated/persistent platform privileges. It does not modify other skills or system-wide settings. Autonomous invocation remains possible (platform default) but is not combined with other concerning flags.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install telegram-openapi-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/telegram-openapi-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Add support for `multipart/form-data` local file upload to `sendPhoto` and `sendDocument` (via local path strings).
- Update guardrails: clarify that `sendMediaGroup` is still JSON-only and does not use multipart file arrays.
- Expand documentation for multipart usage, including local photo/document file upload examples.
- `setWebhook` now supports multipart certificate uploads for self-signed certificates through the `certificate` file field.
- Update OpenAPI schema and usage references to reflect multipart and related behavior.
- Improve prerequisites, scope, and operation documentation for clarity.
v1.0.0
telegram-openapi-skill 1.0.0
- Initial release with OpenAPI-based Telegram Bot API operations via UXC integration.
- Supports core operations: bot identity, chat lookup, message and media sends (by file_id/URL), polling (getUpdates), and webhook configuration.
- Uses bot-token path authentication with credential binding and path-prefix templating.
- Webhook and polling management include built-in guardrails to prevent conflicts and guide correct usage.
- Explicitly excludes multipart file uploads, self-signed webhook certs, generic webhook ingestion, and unsupported Telegram API features.
- Provides detailed setup, validation, and runtime guidance for reliable bot workflows.
元数据
常见问题
Telegram OpenAPI Skill 是什么？
Operate Telegram Bot API through UXC with a curated OpenAPI schema, bot-token path auth, polling-based reads, and webhook management guardrails. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 228 次。
如何安装 Telegram OpenAPI Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install telegram-openapi-skill」即可一键安装，无需额外配置。
Telegram OpenAPI Skill 是免费的吗？
是的，Telegram OpenAPI Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Telegram OpenAPI Skill 支持哪些平台？
Telegram OpenAPI Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Telegram OpenAPI Skill？
由 jolestar（@jolestar）开发并维护，当前版本 v1.0.1。
推荐 Skills