temporal-golang-pro
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on providing expert-level guidance for Temporal Go SDK implementation. All code examples follow official best practices, such as using workflow.GetVersion for versioning and workflow.Sleep for durable time management.\n- [SAFE]: The security examples demonstrate how to correctly implement mTLS for worker-to-cluster communication using standard Go crypto/tls and crypto/x509 packages, which is a recommended security practice for production environments.\n- [SAFE]: The mentioned dependencies, such as go.temporal.io/sdk and github.com/stretchr/testify/suite, are standard, reputable libraries within the Go and Temporal ecosystems.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external inputs via Workflow signals and arguments, which technically introduces an attack surface for indirect prompt injection if the resulting system handles untrusted data.\n
- Ingestion points: File SKILL.md (ApprovalWorkflow) and testing-strategies.md (Test_WorkflowWithSignal) demonstrate data entry via workflow.GetSignalChannel and workflow input arguments.\n
- Boundary markers: The skill does not explicitly provide validation or sanitization patterns for external data.\n
- Capability inventory: The skill teaches the use of workflow.ExecuteActivity which allows for network requests, database operations, and other side effects across all implementation scripts.\n
- Sanitization: There is no mention of escaping or validating external input before it influences workflow logic or activity parameters.
Audit Metadata