Telegram Bot Builder

**Quick judgment**: This skill is a fairly complete, low-level bridge to the Telegram Bot API. It’s powerful and flexible for building Telegram-based interactions but exposes all the usual risks of programmatic messaging and chat management without much built-in guardrailing. **Strengths** - Good coverage of core Telegram bot capabilities: sending text/media, keyboards, chat and message management, and callback queries. - Clear, example-driven documentation (curl + jq) that illustrates real API calls. - Works over standard HTTPS with a single TELEGRAM_BOT_TOKEN, so it should integrate smoothly into most OpenClaw environments. **Key risks / limitations** - No obvious built-in rate limiting, abuse prevention, or content safeguards: an agent could unintentionally spam users/chats, send sensitive data, or mis-manage groups (e.g., banning users, deleting messages). - Requires storing and using a Telegram bot token; if mishandled, an attacker could hijack the bot. - Documentation focuses on raw HTTP examples rather than higher-level abstractions, so agents or developers must understand Telegram’s method semantics to use it safely. **Recommended scenarios** - Well-controlled environments where the operator understands Telegram Bot API semantics and can supervise or constrain how the skill is used. - Notification, utility, or support bots where outbound messages and chat operations are clearly scoped and monitored. - Internal or small-team bots where the blast radius of misconfiguration or misuse is limited. **Use with caution** in: - Public, large-scale deployments without additional safety layers (e.g., spam detection, permission checks, strong policy prompts). - Any context where an unsupervised agent could take autonomous actions that affect many users or critical groups/channels.