temporal-go
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for the Temporal Go SDK and does not contain any malicious instructions or suspicious code patterns. All code examples follow standard developer practices for the framework.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file paths, or unauthorized network exfiltration patterns were detected. The use of
localhost:7233is a standard default for local Temporal development. - [INDIRECT_PROMPT_INJECTION]: The skill documents interfaces for receiving external data (Signals, Queries, and Updates). It explicitly provides patterns for input validation, such as the
Validatorfield inUpdateHandlerOptions, which mitigates the risk of processing malicious external payloads. - [REMOTE_CODE_EXECUTION]: No patterns for downloading and executing untrusted scripts or dynamic code evaluation from remote sources were found.
Audit Metadata