openclaw-tg-canvasTelegram Mini App Canvas with terminal and optional Control UI proxy. Renders agent-generated content (HTML, markdown, A2UI) in a Telegram Mini App; push wit...
Install via ClawdBot CLI:
clawdbot install clvv/openclaw-tg-canvasGrade Good — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → http://127.0.0.1:3721/pushAccesses system directories or attempts privilege escalation
sudo cpCalls external URL not in known-safe list
https://github.com/clvv/openclaw-tg-canvasUses known external API (expected, informational)
api.telegram.orgGenerated Feb 27, 2026
Development teams use the canvas to share live code snippets, terminal outputs, and debugging visualizations in real-time within a secure Telegram group. This facilitates pair programming and code reviews without switching contexts, leveraging the JWT-gated terminal for direct server access.
Support agents push dynamic HTML dashboards to display customer metrics, ticket statuses, and resolution guides directly in a Telegram Mini App. The push API allows updates from backend systems, while the terminal enables troubleshooting server logs for escalated issues.
Instructors deliver interactive lessons with markdown-based slides and live coding examples through the canvas to students in a Telegram channel. The terminal feature allows real-time command demonstrations, and content updates are pushed via CLI as the lesson progresses.
Operations teams monitor system health by pushing live data visualizations (e.g., graphs, alerts) to the canvas from monitoring tools. The optional OpenClaw proxy integrates control UI for managing infrastructure, with access restricted to authorized user IDs.
Marketing teams use the canvas to preview and update campaign assets like HTML banners or analytics reports within Telegram. The push endpoint allows seamless updates from content management systems, while the terminal assists in backend data processing.
Offer a hosted version of the skill with enhanced features like multi-team canvases, analytics, and premium support. Charge monthly per user or team for access to the Telegram-integrated collaboration platform, targeting small to medium businesses.
Provide a free tier with basic canvas and push functionality, while monetizing advanced features such as increased user limits, custom domains, and priority terminal access. Upsell through in-app upgrades or enterprise licenses.
Deliver tailored implementations for enterprises needing specific integrations (e.g., with existing CRM or monitoring tools). Revenue comes from project-based fees for setup, customization, and ongoing maintenance services.
💬 Integration Tip
Ensure environment variables like BOT_TOKEN and PUSH_TOKEN are securely managed using secrets vaults, and test the Cloudflare tunnel configuration to avoid exposing sensitive endpoints publicly.
Scored Apr 19, 2026
AI Analysis
The skill's external API usage (Telegram API, GitHub) is consistent with its stated purpose, and the JWT-gated terminal access is appropriately restricted. The 'UNKNOWN_DATA_SINK' signal for localhost:3721 appears to be the documented push endpoint for agent updates, not exfiltration. No credential harvesting or obfuscation is present.
Audited Apr 16, 2026 · audit v1.0
Guides solo founders through validating startup ideas, architecting product design, and defining visual systems with structured design documents as output.
Convert natural language to UML diagrams, export editable PPT/EMF with individually editable shapes in PowerPoint.
Build editable cloud architecture diagrams (Azure/Microsoft, AWS, GCP, Microsoft Fabric) using official vendor icons, output as both .excalidraw and .drawio...
Professional brand identity designer for SVG logos, icons, brandmarks, and complete visual identity systems. Use when the user asks for logos, icons, app ico...
Colorpedia namespace for Netsnek e.U. color science and design toolkit. Offers color palette generation, accessibility contrast checking, format conversion,...
Hand-drawn Excalidraw JSON diagrams — architecture, flow, sequence. Generate clean, well-laid-out charts with consistent box sizing, meaningful colors, and z...