← 返回 Skills 市场
342
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install tg-notify
功能描述
tg-notify
安全使用建议
This skill will read your Telegram bot token from ~/.openclaw/openclaw.json and use it to send messages via the Telegram Bot API. That file contains a sensitive credential — the skill did not declare this config path or a required credential. Before installing, verify you trust the skill's source and that you want it to access that local file. Safer alternatives: ask the author to (a) declare the config path or require an env var in the registry metadata, or (b) allow providing a token explicitly instead of reading your home directory. Inspect ~/.openclaw/openclaw.json yourself to confirm what the skill would read, ensure file permissions are tight, and consider creating a dedicated bot/token with minimal scope for this use. If you do not want any skill to access local secrets, do not install this skill.
功能分析
Type: OpenClaw Skill
Name: tg-notify
Version: 1.0.3
The skill sends Telegram notifications by reading a bot token from the local `~/.openclaw/openclaw.json` file and executing `curl` commands. While the functionality aligns with its stated purpose, the use of shell commands with dynamic placeholders for user-provided messages and IDs poses a risk of command injection. Additionally, the skill requires high-privilege access to sensitive configuration files to retrieve credentials.
能力评估
Purpose & Capability
The skill claims to send Telegram notifications and its instructions use the Telegram Bot API via curl — this aligns with the stated purpose. It also depends on node and curl (metadata), which is reasonable for the shown commands.
Instruction Scope
The SKILL.md explicitly instructs the agent to read a bot token from the user's ~/.openclaw/openclaw.json via a node one-liner and then POST messages to api.telegram.org. Reading a local config file containing a secret is broader scope than the skill's declared requirements (which list no config paths or env vars). The instructions therefore access sensitive local state not declared in the registry metadata.
Install Mechanism
Instruction-only skill with no install spec or code files — no code is written to disk by the skill itself, which is lower risk from installation mechanics.
Credentials
No required env vars or config paths are declared, yet the runtime steps require reading a Telegram BOT_TOKEN from ~/.openclaw/openclaw.json. That file contains a secret token (sensitive) and should have been declared as required input or the skill should accept a provided token instead. The metadata does list node and curl as needed, which is appropriate.
Persistence & Privilege
The skill is not forced always-on and does not request system-wide persistence. It does not attempt to modify other skills or global config in the instructions provided.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tg-notify - 安装完成后，直接呼叫该 Skill 的名称或使用
/tg-notify触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
- Expanded the skill description to clarify purpose and common use cases.
- Added example trigger phrases (in English and Russian) to the description for easier discovery.
- No changes to code or functionality; documentation update only.
v1.0.2
- Description in SKILL.md shortened to "tg-notify".
- All example usage instructions and content about features remain unchanged.
v1.0.1
- Added metadata section to SKILL.md with emoji and required binaries.
- Removed the _meta.json file.
- Documentation and usage instructions in SKILL.md remain otherwise unchanged.
v1.0.0
Send Telegram notifications via bot; token read dynamically from openclaw.json
元数据
常见问题
Tg Notify 是什么？
tg-notify. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 342 次。
如何安装 Tg Notify？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tg-notify」即可一键安装，无需额外配置。
Tg Notify 是免费的吗？
是的，Tg Notify 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Tg Notify 支持哪些平台？
Tg Notify 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tg Notify？
由 AgohpAI（@agohpai）开发并维护，当前版本 v1.0.3。
推荐 Skills