Telegram
Alert level: High
OpenClaw skill for designing Telegram Bot API workflows and command-driven conversations using direct HTTPS requests (no SDKs).
Locality:Local
Data access:Sensitive
Actions:Read
Installs 5Downloads 991Stars 2Updated 228h ago
Why this rating
Deterministic checks triggered by the tool capabilities and evidence.
- Locality: Local
SKILL.md is a workflow/reference guide rather than a bundled API execution script.
- Data access: Sensitive
Required inputs include bot token and webhook/security configuration details.
- Action surface: Read
Expected output is design and operational guidance, not direct state-changing calls.
Best practices
Follow these steps to reduce risk when using this skill.
- Never store or log bot tokens in plaintext transcripts or debug output.
- Use webhook secret token validation and strict update-type filtering.
- Separate development and production bots to limit blast radius of mistakes.
Evidence links
Public sources backing the indicator assignments.
Always be careful when navigating away from the website.
Max-risk rule
If any capability reaches a higher level, the entire indicator level bumps up to keep ratings deterministic and easy to scan.