技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 198 · 1 current installs · 1 all-time installs
⭐ 0
安装量（当前） 1
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：aiwithabidi/telegram-business
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's stated purpose (Telegram business bot) matches the single credential it asks for (TELEGRAM_BOT_TOKEN), but the runtime instructions reference many external integrations and Python scripts that are not included or declared, which is inconsistent and warrants caution.
目的
Name/description match the requested TELEGRAM_BOT_TOKEN and Telegram bot functionality — that credential is reasonable for a Telegram bot. However the SKILL.md discusses CRM integrations (GHL), payment providers (Stripe), lead-scorers and other scripts, but the package declares none of the additional environment variables or credentials those integrations would reasonably need.
说明范围
The instructions tell the agent/user to run a variety of Python scripts (e.g. {baseDir}/scripts/telegram_business.py, ../ghl-crm/{baseDir}/scripts/ghl_api.py, lead_scorer.py) and to set up webhooks and CRM calls, but this skill bundle contains no code files — only SKILL.md. The instructions also reference relative paths and placeholders that appear inconsistent (mixing ../ and {baseDir}). That mismatch (instructions expecting local scripts and…
安装机制
No install spec and no code files — lowest risk from arbitrary installers. This is an instruction-only skill, so nothing in the package will be written to disk by an installer step.
证书
Only TELEGRAM_BOT_TOKEN is declared (appropriate as the primary credential). However the documentation references Stripe/payment providers and CRM APIs without declaring required API keys, webhook secrets, or other env vars. That omission could be benign (the skill expects the user to supply them locally), but it is an inconsistency you should verify before trusting the skill.
持久
The skill does not request always:true or any system config paths and does not request persistent installation. It allows normal autonomous invocation (disable-model-invocation:false) which is the platform default; combine that with a bot token only if you trust the skill's origin.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Telegram Business」。简介：Telegram bot for business automation — lead capture forms, inline keyboard menu…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aiwithabidi/telegram-business/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。