Telegram (Skill Router)
Router skill: pick the reference that matches your task.
Quick Navigation
| Task | Reference | | --------------------------------------- | ----------------------------------------------------- | | New to Telegram bots | bots-overview.md | | Bot capabilities overview | bot-features.md | | API methods/types | bot-api.md | | Webhook setup & security | webhooks.md | | aiogram 3 handlers/FSM | aiogram-patterns.md | | Keyboard UX | keyboard-design.md | | Inline mode | inline-mode.md | | Mini Apps (Web Apps) | mini-apps.md | | Payments (Stars) | payments.md | | Authentication (Login Widget, URL Auth) | authentication.md | | Rate limits & performance | performance.md |
Critical Prohibitions
- ❌ No polling + webhooks simultaneously for same bot
- ❌ No hardcoded tokens/secrets — use environment variables
- ❌ No secrets in callback_data or logs
- ❌ No ignoring
answer_callback_query— always respond - ❌ No blocking work in webhook handlers — use background tasks
- ❌ No trusting Login Widget data without hash verification
Definition of Done
- [ ] Webhook handlers validate
X-Telegram-Bot-Api-Secret-Token - [ ] Keyboards: max 2 buttons per row, mobile-first
- [ ] Callback data validated, not trusted blindly
- [ ] Handlers are idempotent or have de-duplication
Links
Related Skills
- PostgreSQL — for database layer
- FastAPI — for API layer (if exists)