temporal
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The overview file
references/00-overview.mdprovides installation instructions for the Temporal CLI via a piped shell command:curl -sSf https://temporal.download/cli.sh | sh. This is a standard installation method for a well-known service and uses the official infrastructure of the technology provider, which is considered safe. - [EXTERNAL_DOWNLOADS]: The skill references the installation of official library packages including
temporaliofor Python and@temporalio/*for Node.js from public registries (PyPI and npm). These are legitimate dependencies for the documented technology. - [COMMAND_EXECUTION]: The skill contains
scripts/check-updates.py, a utility script designed for skill maintainers to verify file integrity and check for upstream SDK updates via the PyPI JSON API. The script performs functional diagnostic tasks and does not process untrusted external input.
Audit Metadata