Skip to main content

create-agent-with-telegram-group

Creates an OpenClaw agent linked to a dedicated Telegram group, facilitating user-specific agent provisioning and management.

Install this skill

or
60/100

Security score

The create-agent-with-telegram-group skill was audited on Jun 13, 2026 and we found 8 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 29

Access to hidden dotfiles in home directory

SourceSKILL.md
29- `~/.openclaw/openclaw.json` — read (model discovery) and write (agent binding)
medium line 30

Access to hidden dotfiles in home directory

SourceSKILL.md
30- `~/.openclaw/cron/jobs.json` — read-only (for job listing if needed)
medium line 32

Access to hidden dotfiles in home directory

SourceSKILL.md
32- `~/.openclaw/agents/<agent-id>/agent/` — directory created (no auth files copied)
medium line 36

Access to hidden dotfiles in home directory

SourceSKILL.md
36- `scripts/provision_config.py` reads and writes `~/.openclaw/openclaw.json`.
medium line 37

Access to hidden dotfiles in home directory

SourceSKILL.md
37- By default it creates a backup file: `~/.openclaw/openclaw.json.bak.<timestamp>`.
medium line 50

Access to hidden dotfiles in home directory

SourceSKILL.md
50- `model` (required): ask user explicitly which model to use; model options must be read live from the user’s `~/.openclaw/openclaw.json` (do not hardcode examples)
medium line 73

Access to hidden dotfiles in home directory

SourceSKILL.md
731. Read available models from `~/.openclaw/openclaw.json` first, then confirm inputs with user (agent name, model, init-file preferences, optional telegram group title).
medium line 91

Access to hidden dotfiles in home directory

SourceSKILL.md
91- ensure `~/.openclaw/agents/<agent-id>/agent` exists
Scanned on Jun 13, 2026
View Security Dashboard
Installation guide →