📦 tg buttons — Telegram按钮自动着色
v1.0.0根据动作的关键性与可逆性，自动为Telegram机器人选择按钮设置默认、红色（破坏性）或灰色（次要）配色，提升交互安全性。
0· 569·0 当前·0 累计
by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
可疑
medium confidenceThe skill's code and runtime instructions are consistent with a Telegram button-coloring helper, but the package metadata omits required environment variables (BOT_TOKEN / CHAT_ID) and there are small mismatches between declared requirements and actual runtime needs.
评估建议
This skill appears to do what it claims (auto-classify and color Telegram choice buttons), but the registry metadata incorrectly lists no required environment variables while the code expects a BOT_TOKEN (and optionally CHAT_ID). Before installing or running: 1) treat your BOT_TOKEN like a secret — don't paste it into public places; 2) inspect the scripts locally (they only scaffold files and call the Telegram API) and run them in a safe environment; 3) confirm that your Telegram Bot token has o...详细分析 ▾
ℹ 用途与能力
The skill's name, description, SKILL.md, and included scripts all focus on coloring Telegram buttons — this is coherent. However, the registry metadata says "Required env vars: none" and "Primary credential: none" even though the scripts and Python module require a BOT_TOKEN (and optionally CHAT_ID). That mismatch is unexpected and should be corrected.
✓ 指令范围
SKILL.md and the included code only instruct the agent to classify button text and send requests to the Telegram Bot API. There are no instructions to read unrelated files, exfiltrate arbitrary data, or call services outside Telegram. The classifier is rule-based (regex) and example-driven; scope is limited to UI classification.
✓ 安装机制
No install spec is provided (instruction-only), and included scripts simply scaffold local project files. There are no downloads from untrusted URLs or extracted archives. Running the provided setup script will write files into a directory you choose.
⚠ 凭证需求
The skill actually requires a Telegram BOT_TOKEN (and typically a CHAT_ID for testing) at runtime, but the registry metadata declares no required environment variables or primary credential. Requesting a bot token is proportionate for a Telegram integration, but the metadata omission is an incoherence that could mislead users about what secrets will be needed.
✓ 持久化与权限
The skill is not marked always:true, does not request system-wide persistence, and does not attempt to modify other skills or global agent settings. It only scaffolds a small project and sends messages via the Bot API when run.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/14
- Initial release of the Colored Choice Buttons skill for Openclaw AI Bot. - Automatically classifies every choice button into primary (default/blue), destructive (red), or secondary (gray) styles based on action criticality. - Strictly enforces that all multi-choice button sets must be styled to reflect consequence and recommendation—no more plain buttons. - Includes a Python auto-classifier reference implementation based on keywords to assign the appropriate style per button. - Provides detailed examples and guidelines for button color assignment by context and consequence. - Supports optional custom emoji icons for enhanced button clarity.
● 无害
安装命令
点击复制官方npx clawhub@latest install telegram-colored-choices-buttons
镜像加速npx clawhub@latest install telegram-colored-choices-buttons --registry https://cn.longxiaskill.com