The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the AWS CLI (aws), Temporal CLI (temporal), and Temporal Cloud CLI (tcld) to manage cloud resources and worker deployments. It also invokes language-specific build tools including go, pip, npm, dotnet, gradlew, and mvn to compile and package worker code.
[PRIVILEGE_ESCALATION]: The skill automates the creation and modification of IAM roles using CloudFormation templates. This includes the iam:PassRole and iam:CreateRole permissions required for Lambda execution and Temporal's cross-account invocation. These actions are legitimate for the skill's purpose but involve high-privilege operations, which are mitigated by mandatory user approval steps before any account-mutating commands are executed.
[EXTERNAL_DOWNLOADS]: The skill fetches dependencies and code artifacts from official, trusted registries including PyPI, NPM, NuGet, and Maven Central. It also uses curl to download specific NuGet and Maven packages for API surface inspection. These downloads target well-known, official service domains.
[INDIRECT_PROMPT_INJECTION]: The skill processes outputs from external CLI tools (e.g., listing Namespaces or AWS functions) to drive its internal logic. It implements boundary checks, such as identifying support status for specific cloud providers and validating that Namespaces match their host providers, which reduces the surface for injection via external tool outputs.
[DYNAMIC_EXECUTION]: The skill handles the packaging and deployment of compiled binaries and libraries, such as the .NET SDK's native Rust bridge (libtemporalio_sdk_core_c_bridge.so) and Go's cross-compiled bootstrap binary. These are handled using standard build and FFI patterns from a trusted organization.

temporal-serverless