扫描报告
10 /100
telegram-group-onboard
Automatically onboard new Telegram groups so the bot responds immediately
Legitimate Telegram group onboarding skill with clear documentation and proper shell command usage for config management.
可以安装
Skill is safe for use. No changes needed.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:47-60 shows all bash commands |
| 文件系统 | READ | READ | ✓ 一致 | scripts/add-telegram-group.sh:31 reads config files |
| 文件系统 | WRITE | WRITE | ✓ 一致 | scripts/add-telegram-group.sh:43 modifies openclaw.json |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:57-58 documents ssh/scp for remote servers |
目录结构
2 文件 · 6.6 KB · 201 行 Markdown 1f · 150L
Shell 1f · 51L
├─
▾
scripts
│ └─
add-telegram-group.sh
Shell
└─
SKILL.md
Markdown
安全亮点
✓ All shell commands explicitly shown in SKILL.md - no hidden execution
✓ Script uses atomic write pattern (jq → tmp → mv) for safe config updates
✓ Creates timestamped backups before modification
✓ Uses set -euo pipefail for strict error handling
✓ Proper input validation with usage message
✓ jq used safely for JSON manipulation - no eval or dangerous patterns
✓ Config modification scoped to specific openclaw.json locations