Scan Report
5 /100
telegram-agent-setup
Complete guide to connecting OpenClaw with Telegram. Set up bot, configure channels, handle groups/topics, voice messages, inline buttons, media, and troubleshoot common issues.
This is a documentation-only skill containing setup instructions for connecting OpenClaw to Telegram. No executable code is present - it provides only markdown documentation with CLI commands for users to follow manually.
Safe to install
No action needed. The skill is safe to use as it contains only documentation and does not execute any code.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations in documentation |
| Network | NONE | NONE | — | No network operations - only provides Telegram bot setup instructions |
| Shell | NONE | NONE | — | Documents CLI commands for users to execute manually, no automatic shell executi… |
| Environment | NONE | NONE | — | Mentions environment variable storage but does not access them |
| Skill Invoke | NONE | NONE | — | No skill invocation code |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser automation |
| Database | NONE | NONE | — | No database operations |
File Tree
2 files · 6.7 KB · 238 lines Markdown 2f · 238L
├─
README.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Documentation-only skill with no executable code
✓ Includes security best practices (allowedChatIds, rejectUnknown configuration)
✓ Recommends version pinning for faster-whisper
✓ Does not contain obfuscated or suspicious code
✓ All network/API interactions described are for legitimate Telegram bot setup
✓ No credential harvesting or exfiltration
✓ No base64 encoding or eval() patterns
✓ No remote script execution (curl|bash patterns)
✓ No sensitive file access (~/.ssh, ~/.aws, .env)