temporal-python-testing
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and boilerplate code for testing Temporal workflows using standard Python testing frameworks like pytest.
- [EXTERNAL_DOWNLOADS]: The skill references official Temporal documentation (docs.temporal.io) and public GitHub repositories (github.com/temporalio), which are well-known and trusted sources in the software development community.
- [COMMAND_EXECUTION]: The local setup guide includes standard Docker Compose configurations and pytest commands. These are routine development tasks and do not represent malicious command execution.
- [CREDENTIALS_UNSAFE]: While the Docker Compose example contains hardcoded database credentials (e.g., 'temporal' for Postgres), these are standard dummy values used in local development documentation and do not expose sensitive user information.
- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions for processing workflow histories from external sources (production servers or files). This is a core feature of Temporal's determinism validation (replay testing). While this represents a data ingestion surface, it is necessary for the skill's primary purpose and is presented as a developer tool rather than an automated agent behavior.
- [PERSISTENCE]: The documentation provides an example of a Git pre-commit hook to run tests before committing code. This is a common developer best practice and is presented purely as a manual configuration example for the user.
Audit Metadata