🤖 Telnyx Bot Signup — 自动注册Telnyx机器人
v1.1.0通过工作量证明挑战，全自动完成 Telnyx 机器人账户注册，省去人工验证步骤。
0· 637·1 当前·1 累计
by @teamtelnyx下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
high confidenceThe skill mostly does what it claims (solve a PoW and automate Telnyx signup) but it declares a TELNYX_API_KEY primary credential that is not needed by the described flow — that mismatch is unexplained and risky.
评估建议
This skill automates Telnyx's PoW signup flow and includes a solver script — that's consistent with the description. However, the registry metadata's declaration that TELNYX_API_KEY is the primary credential does not match the documented flow (the skill creates a new API key rather than requiring one). Do not provide an existing TELNYX_API_KEY to this skill unless you understand why it's needed. Also be careful when pasting the single-use sign-in link or session token: that link yields a session...详细分析 ▾
⚠ 用途与能力
The skill's description is a Telnyx signup helper and the runtime instructions show a flow that does not require an existing Telnyx API key. Yet registry metadata marks TELNYX_API_KEY as the primary credential. Requesting an existing TELNYX_API_KEY is not justified by the SKILL.md and is disproportionate to the stated purpose.
ℹ 指令范围
SKILL.md stays within the signup flow: obtaining a PoW challenge, running the bundled solver, submitting signup, handling the magic link email, and exchanging a session token for a new API key. It warns about CPU cost and advises running the solver off the main thread. One sensitivity: the flow asks the user to paste a single-use sign-in link (which yields a session token). That link/session token is sensitive and the skill will exchange it for a permanent API key, so the user must avoid pasting it into untrusted or public channels.
✓ 安装机制
No install script; instruction-only skill with one small local Python solver script. No network installs or remote downloads are performed by the skill itself.
⚠ 凭证需求
The only declared required environment/credential is TELNYX_API_KEY, but none of the SKILL.md steps use it: endpoints in the flow are accessed without a pre-existing API key and the flow creates a new API key for the new account. Declaring TELNYX_API_KEY as the primary credential appears unjustified and could lead users to expose an existing key unnecessarily.
✓ 持久化与权限
always is false, no install-time modifications, and the skill does not request system-wide privileges. Autonomous invocation is allowed (platform default) but not combined with other privilege escalation signals.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/20
Added resend magic link endpoint (POST /v2/bot_signup/resend_magic_link) as fallback when verification email doesn't arrive or expires. Includes rate limits (3 resends, 60s cooldown).
● 可疑
安装命令
点击复制官方npx clawhub@latest install telnyx-bot-signup
镜像加速npx clawhub@latest install telnyx-bot-signup --registry https://cn.longxiaskill.com