start-temps
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system commands including
cargo,bun,docker,lsof, andkillto manage the local development lifecycle. These are standard operations for development tooling. - [CREDENTIALS_UNSAFE]: The skill handles local development credentials by generating random passwords using
openssland storing them in dedicated files (e.g.,~/.temps-dev/slot-<N>.admin-password) with restricted permissions (chmod 600). It avoids hardcoding secrets and provides clear warnings against printing sensitive values. - [EXTERNAL_DOWNLOADS]: The skill pulls the
timescale/timescaledb-ha:pg18Docker image from a well-known registry. This is a standard dependency for the project's database component. - [COMMAND_EXECUTION]: To prevent shell injection, the skill uses
printf %qto safely escape variables when writing environment configuration files that are later sourced by other scripts. - [COMMAND_EXECUTION]: The process termination logic includes a safety check that verifies the process's current working directory (CWD) is within the expected repository root before issuing a kill signal, preventing accidental termination of processes belonging to other sessions.
Audit Metadata