temporal-cloud-setup
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill downloads the unified Temporal CLI and clones sample applications exclusively from official GitHub repositories and package registries belonging to Temporal Technologies (the author). These are trusted vendor sources.
- [SAFE]: Sensitive data, specifically Temporal Cloud API keys, is handled with high security. The skill captures these keys into temporary files with restricted permissions (chmod 600), writes them into a local configuration file, and immediately deletes the temporary data. The API keys are never printed to the console or stored in the agent's chat history.
- [SAFE]: Output redaction is implemented throughout the automation script. Any potential display of credentials or tokens is intercepted and replaced with redaction markers before being shown to the user.
- [SAFE]: Command execution is performed through a deterministic Bash script (
provision.sh) that avoids shell injection by using hardcoded command templates and validating runtime parameters. It enforces strict separation between user-supplied paths and executable logic. - [SAFE]: The skill performs environment checks to ensure local security, such as identifying and warning the user about stray environment variables that might unintentionally override secure configurations.
Audit Metadata