📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills telegram-bot-builder
📦
telegram-bot-builder
Content revision r2 High Risk ⚙️ External commands🌐 Network access🔑 Env variables
Build Production-Ready Telegram Bots
Telegram bot projects often fail through weak architecture, confusing conversations, or incomplete deployment planning. This skill provides practical patterns for building maintainable bots.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "telegram-bot-builder" from https://skillstore.io/skills/sickn33-telegram-bot-builder.md and its manifest at https://skillstore.io/api/skills/sickn33-telegram-bot-builder/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "telegram-bot-builder". Design a reminder bot for a small remote team.
Expected outcome:
- Commands: start, new reminder, list reminders, and cancel reminder.
- Flow: collect time, timezone, message, and confirmation through inline buttons.
- Storage: persist reminders and delivery status in a database.
- Operations: use rate limits, retries, error reporting, and authenticated webhooks.
Using "telegram-bot-builder". Plan premium access for a language practice bot.
Expected outcome:
- Free tier: limited daily exercises with basic feedback.
- Premium tier: unlimited exercises, progress history, and advanced feedback.
- Payments: validate invoice payload, amount, currency, and fulfillment state.
- Access: store entitlements persistently and process payment updates idempotently.
Using "telegram-bot-builder". Recommend a deployment approach for a growing bot.
Expected outcome:
Use authenticated webhooks, persistent state, centralized logs, rate controls, health checks, and a deployment platform suited to expected traffic.
Security Audit
High Riskv6 • 9/6/2026 Open versioned report
All 45 static findings are false positives caused by Markdown fences, JavaScript template literals, documented environment variables, placeholder configuration, and table text. Two semantic issues remain: webhook examples omit request authentication, and payment fulfillment omits transaction-field validation.
1
Files scanned
379
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Webhook Authentication Is Omitted
Webhook examples accept request bodies without configuring Telegram's secret token or validating its header, allowing forged updates at public endpoints.
Both webhook examples process incoming updates, while setWebhook has no secret_token and the handlers perform no secret-header check.
Medium
Payment Fulfillment Lacks Transaction Validation
The successful-payment handler activates premium without checking invoice payload, currency, or total amount, so fulfillment lacks transaction integrity checks.
The example stores the successful_payment object but grants access using only the user identifier, with no validation or idempotency shown.
Risk Factors
⚙️ External commands (29)
SKILL.md:65-76 SKILL.md:76-85 SKILL.md:85-88 SKILL.md:88-102 SKILL.md:102-113 SKILL.md:113-132 SKILL.md:132-143 SKILL.md:143-149 SKILL.md:149-153 SKILL.md:153-154 SKILL.md:154-158 SKILL.md:158-178 SKILL.md:178-198 SKILL.md:198-201 SKILL.md:201-212 SKILL.md:212-215 SKILL.md:215-225 SKILL.md:225-242 SKILL.md:242-257 SKILL.md:257-260 SKILL.md:260-271 SKILL.md:271-274 SKILL.md:274-281 SKILL.md:281-341 SKILL.md:341-348 SKILL.md:348-356 SKILL.md:356-362 SKILL.md:362-366 SKILL.md:366
🌐 Network access (1)
🔑 Env variables (8)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-telegram-bot-builder/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-telegram-bot-builder?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-telegram-bot-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-telegram-bot-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-telegram-bot-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). telegram-bot-builder security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-telegram-bot-builder/audits/6BibTeX citation
@techreport{sickn33-sickn33-telegram-bot-builder-2026,
author = {sickn33},
title = {telegram-bot-builder security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-telegram-bot-builder/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "telegram-bot-builder security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-09-06"
url: "https://skillstore.io/skills/sickn33-telegram-bot-builder/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-telegram-bot-builder:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
68
Community
91
Spec Compliance
What You Can Build
Launch a First Telegram Bot
Choose a library, define commands, and build a clear onboarding flow for a new bot.
Add Revenue Features
Plan paid tiers, Telegram invoices, and usage limits for an existing bot service.
Prepare Production Deployment
Move from polling to webhooks and select a serverless or container deployment pattern.
Try These Prompts
Create a Basic Bot
Design a simple Telegram bot for [purpose]. Include commands, onboarding messages, error handling, and a minimal Telegraf project structure.
Design an Interactive Flow
Design a Telegram conversation for [workflow]. Include inline keyboards, callback states, pagination needs, cancellation paths, and clear user messages.
Plan Monetization
Create a monetization plan for a Telegram bot serving [audience]. Compare revenue models, define limits, and specify secure payment validation.
Architect a Scalable Deployment
Design a production architecture for [expected users] Telegram users. Cover authenticated webhooks, persistence, rate limits, idempotency, observability, deployment, and recovery.
Best Practices
- Keep Telegram handlers small and place business logic in testable service modules.
- Store tokens outside source control and rotate credentials after any suspected exposure.
- Validate webhook requests and payment fields before processing updates or granting access.
Avoid
- Do not hardcode bot tokens, payment credentials, or production webhook secrets.
- Do not use in-memory sessions when restarts or multiple instances must preserve state.
- Do not deploy public webhook handlers without authentication, rate limits, and error monitoring.
Frequently Asked Questions
Which languages and libraries does this skill cover?
It compares Telegraf, grammY, python-telegram-bot, and aiogram, with detailed examples focused on Telegraf.
Can it help design inline keyboards?
Yes. It covers button layouts, callback handlers, pagination, and interaction patterns.
Does it support Telegram payments?
It provides invoice and usage-limit examples. Production implementations need stronger validation, idempotency, and pre-checkout handling.
Can it deploy a bot automatically?
No. It provides deployment patterns for webhooks, Vercel, Railway, Render, and containers, but users must configure their infrastructure.
Is the webhook example production-ready?
No. Add Telegram secret-token verification, rate limits, error handling, monitoring, and appropriate request controls.
Does the skill include persistent storage?
No. It recommends Redis or database-backed state, but it does not implement a storage layer.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/telegram-bot-builderRef
ae6ba0f1a47f0b4427a656b2202f2ff34bfea6be
Maintenance freshness
9/6/2026
Usage
15 downloads · 93 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
stripe-handler
77Build Custom Stripe Payment Flows
by AayushBaniya2006
Custom payment flows need careful checkout, webhook, and fulfillment logic. This skill guides Stripe sessions, metadata routing, and background processing for non-standard purchases.
Coding & Development View
📦
ai-model-nodejs
80Build CloudBase AI Backends in Node.js
by tencentcloudbase
Backend AI setup often fails when model groups, credits, and SDK methods are guessed. This skill gives CloudBase Node.js patterns, preflight checks, and model enablement steps.
Coding & Development View
📦
sent-integration-starter
80Build a Reliable Sent Integration
by sentdm
Messaging integrations can fail through duplicate sends, unsafe retries, weak webhook validation, or incorrect credential scope. This skill provides a staged Sent v3 implementation and launch review.
Coding & Development View
📦
credits-handler
79Build Credit Purchase and Balance Flows
by AayushBaniya2006
Credit features can fail when pricing, balances, and UI flows become inconsistent. This skill guides credit types, purchase flows, balance displays, and allocation helpers.
Coding & Development View
📦
clean-code
79Improve TypeScript Clean Code
by DoubleslashSE
Teams lose time when TypeScript code grows duplicated, complex, and hard to test. This skill guides Claude, Codex, and Claude Code toward simpler functions, clearer names, and safer structure.
Coding & Development View
📦
typescript-node-expert
79Build Better TypeScript Node.js Tools
by DammianMiller
TypeScript and Node.js projects need consistent standards for strict typing, performance, errors, and tests. This skill gives practical patterns for CLI tools, libraries, reviews, and refactors.
Coding & Development View