Scan Report
10 /100
telegram-group-onboard
Automatically onboard new Telegram groups so the bot responds immediately
Legitimate Telegram group onboarding skill with clear documentation and proper shell command usage for config management.
Safe to install
Skill is safe for use. No changes needed.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md:47-60 shows all bash commands |
| Filesystem | READ | READ | ✓ Aligned | scripts/add-telegram-group.sh:31 reads config files |
| Filesystem | WRITE | WRITE | ✓ Aligned | scripts/add-telegram-group.sh:43 modifies openclaw.json |
| Network | READ | READ | ✓ Aligned | SKILL.md:57-58 documents ssh/scp for remote servers |
File Tree
2 files · 6.6 KB · 201 lines Markdown 1f · 150L
Shell 1f · 51L
├─
▾
scripts
│ └─
add-telegram-group.sh
Shell
└─
SKILL.md
Markdown
Security Positives
✓ All shell commands explicitly shown in SKILL.md - no hidden execution
✓ Script uses atomic write pattern (jq → tmp → mv) for safe config updates
✓ Creates timestamped backups before modification
✓ Uses set -euo pipefail for strict error handling
✓ Proper input validation with usage message
✓ jq used safely for JSON manipulation - no eval or dangerous patterns
✓ Config modification scoped to specific openclaw.json locations