The Agent Skills Directory

[SAFE]: The skill provides legitimate deployment workflows for Temporal workers on AWS Lambda. It references official Temporal repositories (github.com/temporalio/*) and well-known cloud provider domains (aws.amazon.com, nuget.org, etc.), which are classified as safe under the analyzer's trusted source rules.
[COMMAND_EXECUTION]: The skill includes shell commands for AWS CLI (aws lambda, aws iam, aws cloudformation) and Temporal CLI (temporal, tcld). These are the primary intended functions of the skill and operate within the user's authenticated cloud environment without any evidence of command injection or unauthorized execution.
[DATA_EXPOSURE_AND_EXFILTRATION]: While the skill handles sensitive identifiers (API keys, ARNs, and environment variables), it follows security best practices by explicitly instructing the user to store secrets in AWS Secrets Manager or SSM Parameter Store rather than plaintext. It also provides warnings against including sensitive data in shell history.
[REMOTE_CODE_EXECUTION]: The skill downloads official Temporal SDK packages from standard registries (NuGet, Maven Central, PyPI, NPM). These are trusted organizations and registries, and the downloads are part of the documented setup process for the respective programming languages.

temporal-serverless