📦 Telegram Toolkit — 电报销售工具
v1.0.0集成 Telegram 机器人命令与快捷键盘，可快速完成 BANT 资质筛选、分享大文件并按频道定制销售策略，一站式提升 B2B 销售效率。
0· 79·1 当前·1 累计
by 下载技能包
最后更新
2026/4/2
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill contains useful Telegram templates and flows, but it expects the agent to read and write CRM data and route files across channels without declaring how that access is provided. Before installing, verify: (1) where CRM/owner/Telegram connectors will come from and that they require least privilege API keys (do not supply broad platform credentials); (2) the skill's provenance — who published it and whether you trust them; (3) how the agent will handle personally identifiable information...详细分析 ▾
⚠ 用途与能力
The SKILL.md clearly targets Telegram-based B2B SDR flows (commands, inline keyboards, large file strategy). However it repeatedly instructs the agent to create/read CRM records, check CRM country fields, send drafts to an 'owner', and route files between channels — operations that normally require connectors and credentials. The skill declares no required env vars, config paths, or binaries to perform CRM or cross-channel actions, which is inconsistent with its described capabilities.
⚠ 指令范围
Instructions explicitly tell the agent to read and write CRM state (create records, check customer history/country), inspect Telegram profile language, ask for external usernames, and route files to other channels. Those are concrete side-effects beyond mere templating. The SKILL.md does not explain what connectors to use, where credentials come from, or how 'send to owner' approval is implemented — granting the agent broad discretion without clear boundaries.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files, so there is no disk install risk. The lack of install artifacts is consistent with a templates/how-to skill.
⚠ 凭证需求
Despite instructing CRM reads/writes and cross-channel file routing, the skill declares no required environment variables, primary credential, or config paths. That mismatch is concerning: practical use would require access tokens or connectors (CRM API keys, Telegram bot token, owner notification channel) that are not declared or scoped here.
✓ 持久化与权限
The skill does not request always-on presence and is user-invocable. It does not instruct modifying other skills or system-wide settings. Autonomous invocation is allowed by platform default, but there is no additional persistence or elevated privilege requested by the skill itself.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install telegram-toolkit
镜像加速npx clawhub@latest install telegram-toolkit --registry https://cn.longxiaskill.com