Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Telegram 配对消息自定义 | Customize Telegram Pairing Messages

Add custom messages to Telegram pairing replies for unapproved users. Insert custom text (e.g., group links, instructions) above the approval command in pairing messages. Use when unpaired Telegram users need additional guidance during the pairing process.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 2.4k · 2 current installs · 2 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill's name/description (customize Telegram pairing messages) aligns with the actions it instructs: locate the sendMessage call, insert a custom string, back up, and restart the gateway. No unrelated credentials, binaries, or services are requested.
Instruction Scope
The instructions require locating and modifying server-side code (likely under /usr/lib/node_modules/openclaw/) and restarting the OpenClaw gateway. This is expected for the task, but it is a privileged operation: you need file-write and service-control rights, and you will be changing the code that handles pairing messages (which are sent to unapproved users). Take care to backup and test changes to avoid breaking the pairing flow or unintentionally sending misleading content to users.
Install Mechanism
Instruction-only skill with no install steps, downloads, or external packages. Nothing is written to disk by the skill itself.
Credentials
No environment variables, credentials, or config paths are requested. The requested filesystem path (/usr/lib/node_modules/openclaw/) is a sensible hint for where OpenClaw might be installed, not an unexplained secret or unrelated credential.
Persistence & Privilege
Skill is not always-enabled and does not request persistent privileges or modify other skills. It only instructs a one-off code change and service restart, which is consistent with the stated purpose.
Assessment
This skill is coherent: it tells you how to edit your OpenClaw code to insert a custom message into the Telegram pairing reply. Before proceeding: (1) make a backup of the file and keep a copy of the original code so you can revert; (2) perform changes in a safe environment (staging) if possible; (3) be aware that these messages are delivered to unapproved users — do not insert sensitive data or content that could be used for phishing; (4) the restart command (openclaw gateway restart) may require elevated privileges or control of the OpenClaw service; (5) consider whether OpenClaw offers a configuration-based customization or plugin point (safer) rather than editing installed node_modules files directly; (6) if you are not the service owner, ask the maintainer to make the change or provide a supported customization mechanism.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.6
Download zip
latestvk9704rhdcvyaka3d8tr0x6v7ys80swc1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Telegram 配对消息自定义

request

实施本技能时, 需要用户提供一份 自定义消息

实施内容

1. 找到需要修改的文件

在你正在运行的代码中搜索下面的代码段

fn: () => bot.api.sendMessage(chatId, [
    "OpenClaw: access not configured.",
    "",
    `Your Telegram user id: ${telegramUserId}`,
    "",
    `Pairing code: ${code}`,
    "",
    "Ask the bot owner to approve with:",
    formatCliCommand("openclaw pairing approve telegram <code>"),
].join("\n")),

2. 备份文件

修改前备份, 方便以后撤销实施

3. 实施修改

在数组中 "Ask the bot owner to approve with:" 项上方添加自定义消息:

修改后

fn: () => bot.api.sendMessage(chatId, [
    "OpenClaw: access not configured.",
    "",
    `Your Telegram user id: ${telegramUserId}`,
    "",
    `Pairing code: ${code}`,
    "",
    "YOUR_CUSTOM_MESSAGE_HERE",  // <- 插入自定义消息
    "Ask the bot owner to approve with:",
    formatCliCommand("openclaw pairing approve telegram <code>"),
].join("\n")),

4. 修改完成后重启服务

openclaw gateway restart

验证

让未配对用户发送 /start 命令,确认收到带自定义信息的配对消息。

一些建议

在寻找需要修改的文件时, 建议先搜索 Ask the bot owner to approve with: 可以帮助你先大幅缩小处理范围, 过滤出最有可能的几个文件.

一个建议的起始目录为 /usr/lib/node_modules/openclaw/

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…