Is crazypeace/telegram-pairing-message-customization safe?
Yes. crazypeace/telegram-pairing-message-customization is safe to install. Oathe's behavioral security audit gave the telegram-pairing-message-customization skill by crazypeace a trust score of 84/100 with 4 findings, none critical or high.
Is crazypeace/telegram-pairing-message-customization safe to install?
This skill provides legitimate functionality for customizing Telegram bot pairing messages by modifying JavaScript code and restarting the service. While it executes system commands and modifies files, these operations are appropriate for the stated purpose and no malicious behavior was detected.
What security issues were found in crazypeace/telegram-pairing-message-customization?
Category Scores
Findings (4)
MEDIUM Service restart command execution -15 ▶
The skill executes 'openclaw gateway restart' command which could disrupt service availability during the restart process.
MEDIUM System file modification -7 ▶
The skill modifies JavaScript source files in the OpenClaw installation, which could break bot functionality if modifications are incorrect.
LOW Potential for message content misuse -20 ▶
The skill allows insertion of arbitrary custom messages into Telegram bot responses, which could be misused for phishing or social engineering if malicious content is provided.
LOW Codebase search operations -15 ▶
The skill searches through the codebase to locate specific JavaScript patterns, which could potentially access unintended files containing similar patterns.
Should I install crazypeace/telegram-pairing-message-customization?
Oathe's verdict for crazypeace/telegram-pairing-message-customization is SAFE with a trust score of 84/100. Recommendation: Install with caution.