360 Secure SkillHub
360 安全技能中心

Zalo

面向 Zalo Bot Platform(bot token)路径的生产级指南:说明 token 配置与连接流程、webhook/长轮询处理、消息能力清单与对话 UX 模式,并给出通知/客服/广播类工作流的方案与运维护栏;另附明确标注为非官方的个人账号自动化(zca-js)与 n8n 自动化参考。

codedao12
codedao12
热度 87.67
最近更新 2026-05-17 11:15:19
分类:开发依赖:代码执行 / 第三方 API应用场景:API 集成 / 自动化脚本 / 工作流 / 模板

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add zalo
Metadata
name
zalo
description
OpenClaw skill for Zalo Bot API workflows (bot token) plus optional guidance on unofficial personal automation tools.

Zalo Bot Skill (Advanced)

Purpose

Provide a production-oriented guide for Zalo Bot API workflows (token-based), with a separate, clearly marked branch for unofficial personal automation tools.

Best fit

  • You use the Zalo Bot Platform / bot token path.
  • You need clear webhook or long-polling handling.
  • You want professional conversation UX guidance.

Not a fit

  • You require guaranteed, officially supported personal-account automation.
  • You need rich media streaming or advanced file pipelines.

Quick orientation

  • Read references/zalo-bot-overview.md for platform scope and constraints.
  • Read references/zalo-bot-token-and-setup.md for token setup and connection flow.
  • Read references/zalo-bot-messaging-capabilities.md for capability checklist.
  • Read references/zalo-bot-ux-playbook.md for UX and conversation patterns.
  • Read references/zalo-bot-webhook-routing.md for webhook/polling handling.
  • Read references/zalo-personal-zca-js.md for the unofficial personal-account branch.
  • Read references/zalo-n8n-automation.md for automation notes and cautions.

Required inputs

  • Bot token and bot configuration.
  • Target workflow (notify, support, broadcast).
  • Delivery model (webhook or polling).

Expected output

  • A clear bot workflow plan, method checklist, and operational guardrails.

Operational notes

  • Validate inbound events and handle retries safely.
  • Keep replies concise; rate-limit outgoing messages.
  • Prefer explicit allowlists for any automation flow.

Security notes

  • Never log tokens or credentials.
  • Treat all state files and cookies as secrets.