temporal-cloud-setup
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands through a dedicated executor script (
scripts/provision.sh) to perform environment checks, CLI management, and process control. - [EXTERNAL_DOWNLOADS]: Downloads the Temporal Cloud CLI via Homebrew and clones sample applications from official repositories in the
temporalioGitHub organization. These are recognized as legitimate vendor resources. - [REMOTE_CODE_EXECUTION]: Executes code from the cloned sample applications to demonstrate workflow functionality across multiple SDKs (Python, Go, Java, .NET, Ruby, and TypeScript).
- [SAFE]: The skill implements robust security measures for sensitive data:
- Secret Handling: API keys are captured directly into configuration files with restricted permissions (
chmod 600) and are redacted in all logs and user-facing output. - Disclosure Gates: Explicitly displays the commands to be run before execution, providing transparency to the user.
- Cleanup Logic: Uses process groups and traps to ensure that all spawned workers are properly terminated upon completion or failure.
Audit Metadata