workflow-orchestration-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official SDKs (e.g., @temporalio/client, temporalio, io.temporal:temporal-sdk) from well-known public registries such as NPM, PyPI, and Maven Central. These are industry-standard libraries for the described technology.
- [COMMAND_EXECUTION]: Includes standard terminal commands for developer workflows, such as starting a local Temporal server via Docker and running application processes (mvn, uvicorn, npm start). These commands are routine for setting up and running Temporal-based applications.
- [SAFE]: Instructions specifically include security and reliability best practices, such as validating activity inputs, ensuring no secrets are stored in workflow state, and implementing idempotency to prevent duplicate operations.
- [SAFE]: All external URL references point to official documentation sites and well-known service providers associated with the technology (temporal.io, javadoc.io).
Audit Metadata