Telegram Polling Skill

Overview

Polls the Telegram Bot API every 2 minutes via CronCreate and routes each incoming message to a command handler. Implements a 10-command bot with layered security: a fail-closed allowlist, an owner-only tier for privileged commands, audit logging, and replay-prevention offset tracking.

Key constraints:

• Telegram requires push-based responses — only send FINAL replies, never partial/streaming output.
• ALL commands are silently dropped for unauthorized senders (fail-closed, no "bot is active" leakage).
• Offset is written BEFORE processing commands to prevent replay attacks.

Prerequisites