Manifest
    by Manifold
    Back to Results

    telegram-e2e-userbot

    Prove user-visible OpenClaw Telegram behavior on Telegram's Test Server with Convex-leased team credentials; drive real-user turns and record messages, edits, deletions, reactions, typing, or rich content.

    quality›testingai›ai-agents
    Rank#3099
    openclawgithubWorkflow391,526Last updated Oct 9, 2026, 02:50 PMgithub/openclaw/openclaw/.agents/skills/telegram-e2e-userbot
    Created
    11 months ago
    Last commit
    yesterday
    Latest release
    v2026.9.92 days ago

    Security Findings

    Excessive permissions scope

    SuspiciousAnalyzer

    5 sensitive file(s) and 18 external URL(s)

    OWASP-AST03

    Hardcoded secrets/API keys3×

    SuspiciousAnalyzer

    Secret Keyword: ci-se...****

    Secret Keyword: synth...****

    Secret Keyword: broke...****

    OWASP-AST04

    Unpinned dependencies

    SuspiciousLineage

    2 unpinned: @openclaw/ai, @openclaw/session-url-contract

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Versions

    2
    • Scanned Oct 9, 2026, 02:50 PMMedium
    • Scanned Oct 3, 2026, 12:41 PMMedium