telegram（sickn33/agentic-awesome-skills） · 技能

Integracao completa com Telegram Bot API. Setup com BotFather, mensagens, webhooks, inline keyboards, grupos, canais. Boilerplates Node.js e Python.

读凭据写文件联网执行命令严重 11 · 高危 14sickn33/agentic-awesome-skills

它会碰到什么

扫了多少22 个文本文件，151 KB

它会碰到什么读凭据写文件联网执行命令

命中总数74 处

命中统计严重 11 · 高 14 · 中 6 · 低 28

逐条看命中（25 条严重或高危）

严重 assets/boilerplate/nodejs/src/index.ts:10cred-paths

console.error('ERROR: Set TELEGRAM_BOT_TOKEN in .env file');

严重 assets/boilerplate/python/bot.py:103cred-paths
```
logger.error("Set TELEGRAM_BOT_TOKEN in .env file")
```
严重 assets/boilerplate/python/webhook_server.py:105cred-paths
```
logger.error("Set TELEGRAM_BOT_TOKEN in .env")
```
严重 assets/boilerplate/python/webhook_server.py:108cred-paths
```
logger.error("Set WEBHOOK_URL in .env")
```

严重 scripts/setup_project.py:51cred-paths

print("  3. Copy .env.example to .env and add your bot token")

严重 scripts/setup_project.py:51cred-paths

print("  3. Copy .env.example to .env and add your bot token")

严重 scripts/setup_project.py:56cred-paths

print("\n  Webhook mode enabled - configure WEBHOOK_URL in .env")

严重 scripts/setup_project.py:58cred-paths

print("\n  AI integration enabled - configure ANTHROPIC_API_KEY in .env")

严重 scripts/setup_project.py:76cred-paths

print("  3. Copy .env.example to .env and add your bot token")

严重 scripts/setup_project.py:76cred-paths

print("  3. Copy .env.example to .env and add your bot token")

严重 scripts/setup_project.py:82cred-paths

print("\n  AI integration enabled - configure ANTHROPIC_API_KEY in .env")

高 assets/boilerplate/nodejs/src/index.ts:8cred-envread
```
const token = process.env.TELEGRAM_BOT_TOKEN;
```
高 assets/boilerplate/nodejs/src/index.ts:14cred-envread
```
const useWebhook = !!process.env.WEBHOOK_URL;
```
高 assets/boilerplate/nodejs/src/index.ts:21cred-envread
```
const port = parseInt(process.env.PORT || '3000');
```
高 assets/boilerplate/nodejs/src/index.ts:22cred-envread
```
const webhookUrl = process.env.WEBHOOK_URL!;
```
高 assets/boilerplate/nodejs/src/index.ts:23cred-envread
```
const secret = process.env.WEBHOOK_SECRET;
```
高 assets/boilerplate/python/bot.py:101cred-envread
```
token = os.getenv("TELEGRAM_BOT_TOKEN")
```
高 assets/boilerplate/python/webhook_server.py:27cred-envread
```
TOKEN = os.getenv("TELEGRAM_BOT_TOKEN")
```
高 assets/boilerplate/python/webhook_server.py:28cred-envread
```
WEBHOOK_URL = os.getenv("WEBHOOK_URL")
```
高 assets/boilerplate/python/webhook_server.py:29cred-envread
```
WEBHOOK_SECRET = os.getenv("WEBHOOK_SECRET", "")
```
高 assets/boilerplate/python/webhook_server.py:30cred-envread
```
PORT = int(os.getenv("PORT", "5000"))
```
高 assets/boilerplate/python/webhook_server.py:100identity-config-write
```
logger.error(f"Failed to register webhook: {data}")
```

高 scripts/send_message.py:132cred-envread

token = args.token or os.environ.get("TELEGRAM_BOT_TOKEN")

高 scripts/test_bot.py:89identity-config-write

print(f"  WARN - Could not check webhook: {safe_err}")

高 scripts/test_bot.py:130cred-envread

token = args.token or os.environ.get("TELEGRAM_BOT_TOKEN")

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

技能内容

Telegram Bot API - Integracao Profissional

Detailed Guide

Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.

When to Use This Skill

When the user mentions "telegram" or related topics
When the user mentions "bot telegram" or related topics
When the user mentions "telegram bot" or related topics
When the user mentions "api telegram" or related topics
When the user mentions "chatbot telegram" or related topics
When the user mentions "mensagem telegram" or related topics

Do Not Use This Skill When

The task is unrelated to telegram
A simpler, more specific tool can handle the request
The user needs general-purpose assistance without domain expertise

Limitations

Use this skill only when the task clearly matches the scope described above.
Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

去原始仓库

它属于哪个仓库

仓库sickn33/agentic-awesome-skills

星标★ 46,490

本站分层T1

该仓技能数6676

原文件路径plugins/agentic-awesome-skills/skills/telegram/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 6676 个技能

同名技能的其他版本

有 3 个不同仓库或目录里都有叫 telegram 的技能。它们内容并不相同，别混用：

sickn33/agentic-awesome-skills — Integracao completa com Telegram Bot API. Setup com BotFather, mensagens, webhooks, inline
sickn33/agentic-awesome-skills — Integracao completa com Telegram Bot API. Setup com BotFather, mensagens, webhooks, inline