temporal
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and code snippets for using the Temporal orchestration platform. No malicious instructions or security bypasses were found.
- [CREDENTIALS_UNSAFE]: The documentation explicitly warns against committing keys to version control and recommends rotating client certificates for mTLS authentication. No hardcoded credentials or sensitive environment paths are present.
- [DATA_EXFILTRATION]: All network-related operations mentioned (gRPC, mTLS) are standard for the Temporal service architecture. There are no suspicious network calls to unknown or untrusted domains.
- [REMOTE_CODE_EXECUTION]: The provided TypeScript snippets use official libraries (@temporalio/workflow) for workflow orchestration. No remote script execution patterns (e.g., curl|bash) or unauthorized package installations were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes ingestion points for external data (Signals and Queries), it correctly identifies these as boundary points and focuses on deterministic processing. No exploitable automated chains involving untrusted data were identified.
Audit Metadata