Route whitelisted third-party service actions through the Trusted Execution Layer.
npx skills add https://github.com/Z5Jonathan-maker/ai-coding-os --skill tel
Please help me install this Agent Skill. Skill: tel Source: https://github.com/Z5Jonathan-maker/ai-coding-os/tree/main/claude/skills/tel Command: npx skills add https://github.com/Z5Jonathan-maker/ai-coding-os --skill tel
TEL prevents credentials from entering Claude chat transcripts while still enabling authorized, audited actions against third-party services on the user’s behalf.
Use when you need to create or manage resources in services like Gamma, GitHub, Gmail, Vercel, Notion, or Linear through credentialed operations without exposing OAuth tokens or API keys in chat.
Ask to use TEL to perform the credentialed action, then provide the exact service, action, and arguments you want executed through the TEL client.
High-intent search queries and answers about installing and using this skill.
Credentialed API actions are routed through the Trusted Execution Layer (TEL), which executes whitelisted requests using secrets stored in 1Password. This ensures credentials never enter Claude chat transcripts while still performing authorized operations on your behalf.
The Trusted Execution Layer (TEL) is a secure routing mechanism that enforces strict API allowlisting and auditability for third-party service operations. It captures an audit_id for traceability and supports undo tokens for reversible actions across services like GitHub, Gmail, and Notion.
Yes, you can manage resources in GitHub, Gmail, Notion, Vercel, and Linear without passing OAuth tokens to the model. TEL routes these credentialed actions through an execution layer that retrieves secrets from 1Password securely.
You can validate a credentialed API request shape by performing a dry-run validation through TEL. This process checks the request structure against local policy YAML files without executing the action, ensuring the operation is allowed before committing.
Yes, a local TEL policy YAML file is required before running credentialed actions. TEL enforces strict allowlisting by checking for policy existence and verifying TEL health before executing any whitelisted requests or capturing audit IDs.
RheasilviaRetrieves credentials and injects secrets from 1Password CLI vaults into environments.
incidentfoxExecute Kubernetes pod restarts, deployment scaling, and rollbacks with dry-run checks.
Umbral-BotExecute, enqueue, and monitor tasks via the Umbral Worker API with typed tools and async operations.
proffesor-for-testingDetect credential exposure in n8n workflow exports and executions.
