durable-execution

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Resonate server binary and source code from the official GitHub repository of the skill author (resonatehq), which is a trusted vendor resource.
  • Evidence (references/DEPLOYMENT.md): curl -L https://github.com/resonatehq/resonate/releases/latest/download/resonate-linux-amd64 -o /usr/local/bin/resonate-server
  • Evidence (references/DEPLOYMENT.md): git clone https://github.com/resonatehq/resonate.git /opt/resonate
  • [COMMAND_EXECUTION]: Provides instructions for deploying the Resonate server as a system service, utilizing standard administrative commands for process management and permissions.
  • Evidence (references/DEPLOYMENT.md): sudo systemctl enable resonate
  • Evidence (references/DEPLOYMENT.md): chmod +x /usr/local/bin/resonate-server
  • [CREDENTIALS_UNSAFE]: Mentions the use of environment variables for managing API keys and authentication tokens, adhering to standard security practices for secret management by avoiding hardcoded credentials.
  • Evidence (references/BAKED-IN.md): process.env.STRIPE_KEY
  • Evidence (references/DEPLOYMENT.md): process.env.RESONATE_TOKEN
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 06:42 AM
Security Audit — agent-trust-hub — durable-execution