itechmeat/telegram
skills/telegram/SKILL.md
Telegram Bot development playbook: bot fundamentals, aiogram 3 patterns (handlers/middlewares/FSM), webhooks, keyboard UX, inline mode, Mini Apps, payments (Stars/subscriptions), authentication. Use when building or modifying Telegram bots, setting up webhook infrastructure, implementing inline keyboards/callback queries, integrating Telegram payments or Stars, or working with aiogram 3 handlers and FSM. Keywords: Telegram, aiogram, Bot API, webhook, handlers, middlewares, FSM, inline keyboard, reply keyboard, callback_query, inline mode, Mini Apps, Web Apps, payments, Telegram Stars, Login Widget.
$ install --global
skillsauthnpx skillsauth add itechmeat/llm-code telegramInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 26, 2026, 7:46 AM46.6s12 files scanned
SKILL.md
- name:
- telegram
- description:
- Telegram Bot development playbook: bot fundamentals, aiogram 3 patterns (handlers/middlewares/FSM), webhooks, keyboard UX, inline mode, Mini Apps, payments (Stars/subscriptions), authentication. Use when building or modifying Telegram bots, setting up webhook infrastructure, implementing inline keyboards/callback queries, integrating Telegram payments or Stars, or working with aiogram 3 handlers and FSM. Keywords: Telegram, aiogram, Bot API, webhook, handlers, middlewares, FSM, inline keyboard, reply keyboard, callback_query, inline mode, Mini Apps, Web Apps, payments, Telegram Stars, Login Widget.
- version:
- 3.28.2
- release_date:
- 2026-05-10
Telegram (Skill Router)
Router skill: pick the reference that matches your task.
Quick Navigation
| Task | Reference | | --------------------------------------- | ----------------------------------------------------- | | New to Telegram bots | bots-overview.md | | Bot capabilities overview | bot-features.md | | API methods/types | bot-api.md | | Webhook setup & security | webhooks.md | | aiogram 3 handlers/FSM | aiogram-patterns.md | | Keyboard UX | keyboard-design.md | | Inline mode | inline-mode.md | | Mini Apps (Web Apps) | mini-apps.md | | Payments (Stars) | payments.md | | Authentication (Login Widget, URL Auth) | authentication.md | | Rate limits & performance | performance.md |
Critical Prohibitions
- ❌ No polling + webhooks simultaneously for same bot
- ❌ No hardcoded tokens/secrets — use environment variables
- ❌ No secrets in callback_data or logs
- ❌ No ignoring
answer_callback_query— always respond - ❌ No blocking work in webhook handlers — use background tasks
- ❌ No trusting Login Widget data without hash verification
Definition of Done
- [ ] Webhook handlers validate
X-Telegram-Bot-Api-Secret-Token - [ ] Keyboards: max 2 buttons per row, mobile-first
- [ ] Callback data validated, not trusted blindly
- [ ] Handlers are idempotent or have de-duplication
Release Note (3.28.x / Bot API 10.0)
- aiogram
3.28.xadds Bot API10.0support, bringing guest-mode updates, richer poll/media flows, live photos, reaction-management methods, and managed/business-bot access settings. - The
3.28.1+patch line also fixesInputPollOption.mediavalidation, so poll/media integrations should assume the newer schema and the patched aiogram serializer behavior.
Links
- Telegram Bot API
- aiogram Releases
- aiogram Documentation
Related Skills
- PostgreSQL — for database layer
- FastAPI — for API layer (if exists)
Related Skills
itechmeat/zvec
data-ai
VerifiedTrustedCommunity
Zvec in-process vector database. Covers collections, indexing, embeddings, reranking, and persistence. Use when embedding Zvec into applications or tuning retrieval/storage behavior. Keywords: Zvec, HNSW-RaBitQ, vector database, ANN.
17SKILL.mdUpdated May 26, 2026
itechmeat/vitest
development
VerifiedTrustedCommunity
Vitest testing framework: Vite-powered tests, Jest-compatible API, mocking, snapshots, coverage, browser mode, and TypeScript support. Use when writing or configuring tests with Vitest, setting up mocking/snapshots, configuring coverage, or running browser-mode tests. Keywords: Vitest, testing, Vite, Jest, mocking, coverage.
17SKILL.mdUpdated May 26, 2026
itechmeat/vite
tools
VerifiedTrustedCommunity
Vite next-gen frontend tooling: dev server, HMR, build, config, plugins, Environment API, Rolldown. Use when setting up or running a Vite project, configuring vite.config.*, authoring plugins, working with HMR or JS API, or managing environment variables and modes. Keywords: vite.config, bundler, Vite, HMR, Rolldown.
17SKILL.mdUpdated May 26, 2026
itechmeat/vibekanban
development
VerifiedTrustedCommunity
Orchestrate AI coding with Vibe Kanban: tasks, review, sessions, workspaces, and isolated git worktrees. Use when managing AI-generated code in isolated environments, planning coding tasks, reviewing AI output, or configuring Vibe Kanban workspaces and agents. Keywords: Vibe Kanban, AI orchestration, worktrees.
17SKILL.mdUpdated May 26, 2026