← 返回 Skills 市场
emoji and tg stickers use proactively based on mood
作者
Daniil Burykin
· GitHub ↗
· v3.0.0
1665
总下载
4
收藏
4
当前安装
3
版本数
在 OpenClaw 中安装
/install tg-sticker-emoji-mood
功能描述
Automatically send Telegram stickers and emojis that match the mood and vibe of the conversation. Activates on every Telegram message to add expressive, huma...
安全使用建议
This skill appears to do exactly what it says: it uses your TELEGRAM_BOT_TOKEN to call api.telegram.org and send stickers. Before enabling it: (1) ensure the bot token you provide has only the permissions you intend and rotate/revoke it if misused; (2) be aware the skill is explicitly designed to act proactively (it will send stickers automatically on messages) — if you don't want autonomous, unsolicited responses, disable autonomous invocation or require user confirmation; (3) test in a private chat or test group first to confirm behavior and rate limits; (4) you can inspect or modify scripts/send_sticker.sh if you want stricter logging, rate-limiting, or opt-out checks.
功能分析
Type: OpenClaw Skill
Name: tg-sticker-emoji-mood
Version: 3.0.0
The skill bundle is classified as suspicious due to a critical shell injection vulnerability (specifically, Python code injection) found in `scripts/send_sticker.sh`. The `emoji` parameter, when passed to the `send_sticker_by_emoji` function, is directly embedded into a `python3 -c` command string without proper sanitization. This allows an attacker to break out of the Python string literal using a single quote and execute arbitrary Python code, leading to potential Remote Code Execution (RCE) on the host system. While the `SKILL.md` instructions are benign and align with the stated purpose, they direct the AI agent to use this vulnerable script.
能力评估
Purpose & Capability
Name/description match the code and SKILL.md: the skill only needs a TELEGRAM_BOT_TOKEN and uses the Telegram Bot API to send stickers. The requested credential is appropriate for the stated functionality.
Instruction Scope
Instructions ask the agent to act proactively (send stickers without an explicit user request) and to use $TELEGRAM_CHAT_ID from the environment. This is behaviorally aggressive (could spam/annoy) but does not read unrelated files or secrets.
Install Mechanism
No install spec; the only code is a small shell script that uses curl and python3. Nothing is downloaded from external, untrusted URLs and nothing is written to disk beyond the script itself.
Credentials
Only TELEGRAM_BOT_TOKEN is required and is consistent with sending messages via the Bot API. No unrelated credentials, config paths, or broad secrets are requested.
Persistence & Privilege
always is false (good). Model invocation is allowed (platform default), which means the agent can autonomously send stickers per the skill's instructions — combined with the proactive behavior this can lead to frequent unsolicited messages; consider limiting autonomous invocation if unwanted.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tg-sticker-emoji-mood - 安装完成后，直接呼叫该 Skill 的名称或使用
/tg-sticker-emoji-mood触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.0.0
**Major update: Makes sticker/emoji reactions more lively and human, with "sticker-first" for casual chats.**
- New "sticker-first" behavior: In casual, playful, or social conversations, send the sticker before your text reply.
- Adjusted when/how often stickers are sent: For chit-chat or memes, sticker is sent 80–100% of the time and leads the response.
- Clarified when sticker follows text (punctuation) vs. when to skip stickers entirely for serious/formal topics.
- Updated rules and guidance for matching user energy, especially when the user sends a sticker/emoji first.
- Enhanced emoji direction guidance for correct conversational feels depending on sticker placement.
- Expanded and reorganized behavioral guidelines for more expressive, timely, and natural reactions.
v2.0.0
- Documentation now includes a new section on "Directional Emoji Awareness" with guidance on choosing the correct direction for pointing emojis based on Telegram's message layout.
v1.0.0
1 st ver. sends stickers based on mood and vibe
元数据
常见问题
emoji and tg stickers use proactively based on mood 是什么？
Automatically send Telegram stickers and emojis that match the mood and vibe of the conversation. Activates on every Telegram message to add expressive, huma... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1665 次。
如何安装 emoji and tg stickers use proactively based on mood？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tg-sticker-emoji-mood」即可一键安装，无需额外配置。
emoji and tg stickers use proactively based on mood 是免费的吗？
是的，emoji and tg stickers use proactively based on mood 完全免费（开源免费），可自由下载、安装和使用。
emoji and tg stickers use proactively based on mood 支持哪些平台？
emoji and tg stickers use proactively based on mood 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 emoji and tg stickers use proactively based on mood？
由 Daniil Burykin（@dandysuper）开发并维护，当前版本 v3.0.0。
推荐 Skills