技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 1 · 3.2k · 17 current installs · 17 all-time installs
⭐ 1
安装量（当前） 17
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：arein/tg
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's described purpose (a Telegram CLI) matches its instructions, but it directs installing an unverified npm package and references storing session/config files without those paths being declared — verify the package source and contents before installing or granting credentials.
目的
Name/description, commands in SKILL.md, and README all consistently describe a Telegram CLI (read, search, send messages, list contacts/groups). Requesting Telegram API credentials (my.telegram.org) is expected for this purpose.
说明范围
Runtime instructions are limited to installing the CLI, running 'tg auth' to authenticate, and using explicit read/write/search commands. The SKILL.md does not instruct the agent to read unrelated files, environment variables, or to exfiltrate data to third-party endpoints beyond Telegram's API.
安装机制
The skill is instruction-only but tells the user/agent to run 'npm install -g @cyberdrk/tg' (or build from source). Installing an npm package is a normal install path for such a CLI, but it carries moderate risk because postinstall scripts or the package code could execute arbitrary actions. The package owner/source is not declared in the registry metadata (source/homepage unknown), so the package's provenance and publish-time integrity are un…
证书
The README and SKILL.md correctly require Telegram API credentials (api_id/api_hash) — proportional and expected. However, registry metadata declared no config paths while the README says configuration and encrypted session data are stored in ~/.config/tg/ (config.json + session). This is a minor mismatch: the tool will read/write local session files even though those paths weren't declared in metadata.
持久
always is false (normal). The README suggests optionally symlinking SKILL.md into ~/.claude/skills to register the skill with a local Claude agent — this modifies the user's agent skills directory but is an explicit user action. No evidence the skill requests permanent elevated privileges or alters other skills automatically.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Telegram CLI」。简介：Telegram CLI for reading, searching, and sending messages. Use when the user as…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/arein/tg/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。