skills/gotempsh/temps/start-temps/Gen Agent Trust Hub

start-temps

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various system commands including cargo, bun, docker, lsof, and kill to manage the local development lifecycle. These are standard operations for development tooling.
  • [CREDENTIALS_UNSAFE]: The skill handles local development credentials by generating random passwords using openssl and storing them in dedicated files (e.g., ~/.temps-dev/slot-<N>.admin-password) with restricted permissions (chmod 600). It avoids hardcoding secrets and provides clear warnings against printing sensitive values.
  • [EXTERNAL_DOWNLOADS]: The skill pulls the timescale/timescaledb-ha:pg18 Docker image from a well-known registry. This is a standard dependency for the project's database component.
  • [COMMAND_EXECUTION]: To prevent shell injection, the skill uses printf %q to safely escape variables when writing environment configuration files that are later sourced by other scripts.
  • [COMMAND_EXECUTION]: The process termination logic includes a safety check that verifies the process's current working directory (CWD) is within the expected repository root before issuing a kill signal, preventing accidental termination of processes belonging to other sessions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 03:11 PM