← 返回 Skills 市场
112
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install telegram-post
功能描述
Отправляет текстовые и мультимедийные сообщения в указанные Telegram-группы через OpenClaw CLI с использованием заданного CHAT_ID.
安全使用建议
Do not install blindly. Review the SKILL.md raw text and remove or rotate any hard-coded secrets (the curl example contains a Telegram bot token). Verify that the OpenClaw CLI and the local gateway referenced are ones you control, and confirm the absolute file paths (/home/larthe/...) map to intended media directories. Prefer skills that declare their required credentials (e.g., BOT_TOKEN) and expect them via environment variables or a secrets manager rather than embedding tokens. If you already used the embedded token, assume it may be compromised: revoke/rotate it and audit the bot's admin privileges. Finally, if you will allow autonomous invocation, restrict the agent's permissions or run it in an isolated account/container to limit access to local files and network endpoints.
功能分析
Type: OpenClaw Skill
Name: telegram-post
Version: 1.0.0
The skill bundle contains a hardcoded Telegram Bot Token (8415787322:AAGK4aQCCGei35g9t2ybKhexlR4BdCZs-3M) and references specific local filesystem paths (/home/larthe/) in SKILL.md. While the stated purpose of posting robotics reports appears legitimate, hardcoding credentials and absolute paths is a significant security risk and suggests the skill is tailored for a specific environment or could be used to interact with unauthorized external endpoints.
能力评估
Purpose & Capability
Name/description match the instructions (sending Telegram messages via OpenClaw CLI). However, the instructions embed a live-looking Telegram bot token in curl examples and reference specific local user paths (/home/larthe/...) and gateway details without declaring any required credentials or configuration. A well-formed Telegram skill would declare a bot token/credential and not hard-code another user's absolute paths.
Instruction Scope
SKILL.md instructs running openclaw and curl commands, listing local media files, and hitting a local gateway (127.0.0.1:18789). It therefore instructs the agent to access local filesystem paths and network endpoints and to use a hard-coded bot token — actions that go beyond simple message formatting and can expose or misuse local files and credentials.
Install Mechanism
No install spec is present (instruction-only), so nothing is written to disk or downloaded by the skill itself. That lowers supply-chain risk, though runtime instructions still invoke local binaries and network calls.
Credentials
The skill declares no required environment variables or primary credential, yet the SKILL.md contains a Telegram bot token in a curl example and references user-specific media directories. This mismatch (no declared credential but visible secret in instructions) is disproportionate and potentially exposes credentials or suggests the skill was copied from another user's environment.
Persistence & Privilege
always is false (good). Autonomous invocation is allowed (platform default). Combined with embedded credentials and local file references, autonomous runs could access local files and call external APIs — increasing blast radius. This is not inherently forbidden but worth considering before enabling autonomous invocation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install telegram-post - 安装完成后，直接呼叫该 Skill 的名称或使用
/telegram-post触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of the Telegram Post Skill:
- Send messages, photos, and videos to Telegram groups using OpenClaw CLI.
- Supports posting plain text or media files to specified group IDs.
- Provides command usage examples and group/channel IDs.
- Includes instructions for sending albums (multiple images) via Telegram API.
- Details bot permissions, group policies, and health/status check commands.
元数据
常见问题
Telegram Post 是什么？
Отправляет текстовые и мультимедийные сообщения в указанные Telegram-группы через OpenClaw CLI с использованием заданного CHAT_ID. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 112 次。
如何安装 Telegram Post？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install telegram-post」即可一键安装，无需额外配置。
Telegram Post 是免费的吗？
是的，Telegram Post 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Telegram Post 支持哪些平台？
Telegram Post 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Telegram Post？
由 larthe（@larthe）开发并维护，当前版本 v1.0.0。
推荐 Skills