📦 Telegram Telethon CLI — Telegram命令行
v1.0.0借助tgctl-telethon CLI，在终端里用Python/Telethon库完成Telegram消息发送、转发、编辑、删除、置顶，以及群聊搜索、成员管理、加入/退群、踢人/邀请等批量操作。
0· 96·0 当前·0 累计
by 下载技能包
最后更新
2026/3/30
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Do not install this package yet. The installer references a 'tgctl' script that is not included in the package — without that file you cannot verify what will run. Before proceeding, ask the publisher for the missing tgctl source (or a trusted upstream repository) and review it for network endpoints and sensitive operations. Confirm the registry metadata is updated to declare the required TELEGRAM_API_ID and TELEGRAM_API_HASH and the session path (~/.tgctl-telethon/). If you must test, run the i...详细分析 ▾
⚠ 用途与能力
SKILL.md describes a Telethon-based tgctl CLI that requires TELEGRAM_API_ID and TELEGRAM_API_HASH and creates local session files. The registry metadata, however, declares no required env vars or config paths. The install script expects a local 'tgctl' script to be bundled, but that script is not present in the manifest. This inconsistency (missing executable and omitted env vars) does not align with the claimed purpose.
ℹ 指令范围
The runtime instructions are narrow and appropriate for a user-account Telegram CLI: install, set TELEGRAM_API_ID/HASH, login interactively, and store sessions locally. The SKILL.md does not instruct the agent to read unrelated system files or send data to unexpected endpoints. However, because the actual 'tgctl' implementation is not included, we cannot verify that its runtime behavior stays within the documented scope.
ℹ 安装机制
The included installer is a local shell script that creates a per-user venv and pip-installs Telethon (from PyPI), then writes a wrapper into ~/.local/bin. Installing Telethon via pip is expected for a Python tool. There is no external arbitrary binary download. Risk is moderate because pip install executes code from PyPI and the main tool ('tgctl') referenced by the installer is missing from the package.
⚠ 凭证需求
The SKILL.md requires TELEGRAM_API_ID and TELEGRAM_API_HASH and stores sessions under ~/.tgctl-telethon/, but the skill metadata lists zero required env vars and no config paths. Declaring no primary credential while the CLI needs API credentials is a clear mismatch. The env access requested by the instructions (API_ID/HASH, session files) is reasonable for the stated functionality, but the registry/package should declare them.
✓ 持久化与权限
The skill does not request always: true and does not modify other skills or system-wide configs. The installer writes files under the user's home (~/.local/bin, ~/.tgctl-telethon-venv, and session directory), which is normal for a per-user CLI tool.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/30
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install telegram-telethon
镜像加速npx clawhub@latest install telegram-telethon --registry https://cn.longxiaskill.com