Telegram (Skill Router)
Router skill: pick the reference that matches your task.
Quick Navigation
| Task | Reference |
|---|---|
| New to Telegram bots | bots-overview.md |
| Bot capabilities overview | bot-features.md |
| API methods/types | bot-api.md |
| Webhook setup & security | webhooks.md |
| aiogram 3 handlers/FSM | aiogram-patterns.md |
| Keyboard UX | keyboard-design.md |
| Inline mode | inline-mode.md |
| Mini Apps (Web Apps) | mini-apps.md |
| Payments (Stars) | payments.md |
| Authentication (Login Widget, URL Auth) | authentication.md |
| Rate limits & performance | performance.md |
Critical Prohibitions
- ❌ No polling + webhooks simultaneously for same bot
- ❌ No hardcoded tokens/secrets — use environment variables
- ❌ No secrets in callback_data or logs
- ❌ No ignoring
answer_callback_query— always respond - ❌ No blocking work in webhook handlers — use background tasks
- ❌ No trusting Login Widget data without hash verification
Definition of Done
- Webhook handlers validate
X-Telegram-Bot-Api-Secret-Token - Keyboards: max 2 buttons per row, mobile-first
- Callback data validated, not trusted blindly
- Handlers are idempotent or have de-duplication
Links
Related Skills
- PostgreSQL — for database layer
- FastAPI — for API layer (if exists)