Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add DmitriyYukhanov/claude-plugins --skill tg-alertsgit clone --depth 1 https://github.com/DmitriyYukhanov/claude-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dmitriyyukhanov/claude-plugins/tg-alerts)<a href="https://agentmods.dev/skills/dmitriyyukhanov/claude-plugins/tg-alerts"><img src="https://agentmods.dev/badge/skills/dmitriyyukhanov/claude-plugins/tg-alerts/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dmitriyyukhanov/claude-plugins/tg-alerts"><img src="https://agentmods.dev/badge/skills/dmitriyyukhanov/claude-plugins/tg-alerts.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.02066 |
| Opus 5 | $0.00028 | $0.01033 |
| Sonnet 5 | $0.00011 | $0.00413 |
| Haiku 4.5 | $0.00006 | $0.00207 |
Grade C, and why
tg-alerts scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -s "https://api.telegram.org/bot<YOUR_TOKEN>/getUpdates" | python3 -m json.tool Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s "https://api.telegram.org/bot<YOUR_TOKEN>/getUpdates" | python3 -m json.tool How it starts
The opening of the file, as written. The whole thing — 243 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Telegram Error Alerts
Adds operational error alerts to any project via a dedicated Telegram bot. Alerts go to a private channel, group, or forum topic — not to end users. Battle-tested pattern with deduplication, HTML formatting, and crash-proof error handling.
When to Use
- User asks to add error notifications, Telegram alerts, or operational monitoring
- Setting up a new deployment and want to know when things break
- NOT for: user-facing bot messages or interactive Telegram features
Setup Flow
This skill is interactive. Each phase involves asking the user questions or guiding them through Telegram actions.
digraph flow {
rankdir=LR;
"Assess\nProject" -> "Create\nBot" -> "Get\nChat ID" -> "Generate\nCode" -> "Integrate" -> "Test";
}
Phase 1: Assess Project
Detect from codebase or ASK:
- Language — Python / Node.js / TypeScript / other
- Framework — FastAPI, Django, Flask, Express, NestJS, Hono, etc.
- Async or sync — determines implementation variant
- Already has a Telegram bot? — alert bot MUST be separate from any main bot
Phase 2: Create Alert Bot
Guide the user through these Telegram steps:
- Open Telegram, find @BotFather
- Send
/newbot- Name: something like "MyApp Alerts"
- Username: something like
myapp_alerts_bot- BotFather replies with a token — copy it
- Save as
ALERT_BOT_TOKENin.env
ASK the user to confirm they have the token before proceeding.
Phase 3: Get Chat ID
ASK: "Where should alerts go?"
| Target | Best for | Complexity |
|---|---|---|
| Private chat | Solo dev | Easiest |
| Group | Small team | Easy |
| Channel | Read-only broadcast | Medium |
| Forum topic | Organized by category | Medium |
Guide based on their choice:
Option A: Private Chat
- Open Telegram, find your new alert bot
- Send it any message (e.g., "hello")
- Run in terminal:
curl -s "https://api.telegram.org/bot<YOUR_TOKEN>/getUpdates" | python3 -m json.tool
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 243 lines · 56 tokens per session scan C cd63b07912c9
tg-alerts is a skill published in the GitHub repository DmitriyYukhanov/claude-plugins (7 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 2,066 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
zasilkovna
Integrate and manage Zásilkovna (Packeta) shipping for Czech and Slovak logistics. Create shipments, generate labels, track packages, manage pickup points, and configure webhooks using the Zásilkovna API. Covers both the REST API and SOAP API. Includes ready-to-run CLI scripts for all API operations. Context: User…
design-code-architecture
Guided journey from an app idea to a deliberate architecture: boundaries, domain model, data decisions, and resilience, making only the expensive-to-reverse decisions and deferring the rest. Orchestrates eight skills phase by phase - clean-architecture, domain-driven-design, system-design, ddia-systems…
symfony:doctrine-events
React to Doctrine entity lifecycle in Symfony with attribute listeners (#[AsDoctrineListener]/#[AsEntityListener], ORM 3) and lifecycle callbacks.
symfony:api-platform-versioning
Evolve API Platform APIs via deprecation (deprecationReason/sunset, RFC 8594/9745), the recommended alternative to versioning; plus path/header strategies.
symfony:config-env-parameters
Manage Symfony configuration with .env files, parameters, secrets vault, and environment-specific settings.
symfony:doctrine-batch-processing
Process large datasets with Doctrine (ORM 3 toIterable, flush+clear, bulk DQL) and memory management.