The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the Temporal Cloud CLI (cloud-cli) from official sources. This includes the temporalio/prerelease/temporal-cloud Homebrew tap on macOS and the github.com/temporalio/cloud-cli/releases page for other platforms. These are official vendor resources for Temporal.
[EXTERNAL_DOWNLOADS]: The skill clones official sample repositories from github.com/temporalio/* to demonstrate workflow functionality. These are trusted vendor repositories.
[COMMAND_EXECUTION]: The skill executes a bundled script scripts/provision.sh to perform environment setup, CLI installation, and cloud resource management. All command execution is designed with a 'disclose-then-run' loop where instructions are rendered in chat before the shell command is invoked.
[CREDENTIALS_UNSAFE]: The skill handles API tokens for Temporal Cloud. It uses a 'secret carve-out' mechanism where tokens are captured directly from tool output into local configuration files with restricted permissions (chmod 600) without ever printing them to the screen, logging them, or passing them through command-line arguments. No hardcoded secrets were found in the source code.
[DATA_EXFILTRATION]: The skill interacts with Temporal Cloud APIs (*.tmprl.cloud) to provision namespaces and mint API keys. These network operations are intrinsic to the skill's purpose of cloud setup and do not involve unauthorized exfiltration of sensitive local data.
[PRIVILEGE_ESCALATION]: The skill uses brew install for software management, which may prompt for standard user elevation depending on the environment, but it does not attempt unauthorized privilege escalation or use of sudo for its own operations.

temporal-cloud-setup