openclaw 网盘下载
OpenClaw

技能详情(站内镜像,无评论)

首页 > 技能库 > Tg Notify

tg-notify

通信与消息

许可证:MIT-0

MIT-0 ·免费使用、修改和重新分发。无需归因。

版本:v1.0.3

统计:⭐ 0 · 123 · 0 current installs · 0 all-time installs

0

安装量(当前) 0

🛡 VirusTotal :可疑 · OpenClaw :可疑

Package:agohpai/tg-notify

安全扫描(ClawHub)

  • VirusTotal :可疑
  • OpenClaw :可疑

OpenClaw 评估

The skill's purpose (sending Telegram messages) matches its behavior, but the runtime instructions read a sensitive local config (~/.openclaw/openclaw.json) without declaring that requirement or a credential, which is an incoherence and a privacy/secret-exposure risk.

目的

The skill claims to send Telegram notifications and its instructions use the Telegram Bot API via curl — this aligns with the stated purpose. It also depends on node and curl (metadata), which is reasonable for the shown commands.

说明范围

The SKILL.md explicitly instructs the agent to read a bot token from the user's ~/.openclaw/openclaw.json via a node one-liner and then POST messages to api.telegram.org. Reading a local config file containing a secret is broader scope than the skill's declared requirements (which list no config paths or env vars). The instructions therefore access sensitive local state not declared in the registry metadata.

安装机制

Instruction-only skill with no install spec or code files — no code is written to disk by the skill itself, which is lower risk from installation mechanics.

证书

No required env vars or config paths are declared, yet the runtime steps require reading a Telegram BOT_TOKEN from ~/.openclaw/openclaw.json. That file contains a secret token (sensitive) and should have been declared as required input or the skill should accept a provided token instead. The metadata does list node and curl as needed, which is appropriate.

持久

The skill is not forced always-on and does not request system-wide persistence. It does not attempt to modify other skills or global config in the instructions provided.

安装(复制给龙虾 AI)

将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Tg Notify」。简介:tg-notify。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/agohpai/tg-notify/SKILL.md
(来源:yingzhi8.cn 技能库)

SKILL.md

打开原始 SKILL.md(GitHub raw)

---
name: tg-notify
description: Send Telegram notifications to team members by Telegram user ID. Use when you need to notify a specific person or multiple people via Telegram (e.g. alerts, reminders, task updates). Trigger phrases: "notify", "send telegram message", "alert [name] via telegram", "ping [person] on telegram", "отправь уведомление", "уведоми".
metadata: {"clawdbot":{"emoji":"📨","requires":{"bins":["curl","node"]}}}
---

# Telegram Notify Skill

Send messages to any Telegram user by chat ID using the OpenClaw bot.

## Bot Token

Read dynamically from `openclaw.json` — never hardcode:

```bash
BOT_TOKEN=$(node -e "const c=require(process.env.HOME+'/.openclaw/openclaw.json');console.log(c.channels.telegram.botToken)")
```

## Send a Message

```bash
BOT_TOKEN=$(node -e "const c=require(process.env.HOME+'/.openclaw/openclaw.json');console.log(c.channels.telegram.botToken)")

curl -s -X POST "https://api.telegram.org/bot${BOT_TOKEN}/sendMessage" 
  -H "Content-Type: application/json" 
  -d '{
    "chat_id": "<TELEGRAM_USER_ID>",
    "text": "<MESSAGE>",
    "parse_mode": "HTML"
  }'
```

## Send to Multiple Recipients

```bash
BOT_TOKEN=$(node -e "const c=require(process.env.HOME+'/.openclaw/openclaw.json');console.log(c.channels.telegram.botToken)")

for CHAT_ID in 111111111 222222222; do
  curl -s -X POST "https://api.telegram.org/bot${BOT_TOKEN}/sendMessage" 
    -H "Content-Type: application/json" 
    -d "{"chat_id": "${CHAT_ID}", "text": "<MESSAGE>", "parse_mode": "HTML"}"
done
```

## Known Team Members

| Name    | Telegram ID |
|---------|-------------|
| Islam   | 6330057147  |

Add others to `USER.md` as they interact with the bot.

## Notes

- `parse_mode: HTML` supports `<b>bold</b>`, `<i>italic</i>`, `<code>code</code>`
- Bot can only message users who have previously started a chat with the bot
- Check response `ok: true` to confirm delivery; handle errors gracefully
- Token is always read from `~/.openclaw/openclaw.json` at runtime — never stored in this file