temporal-developer
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for the Temporal CLI, including direct download links to official binary archives hosted on official Temporal infrastructure (temporal.download).
- [COMMAND_EXECUTION]: Extensive documentation is provided for Temporal CLI commands (e.g.,
temporal workflow start,temporal server start-dev). These are presented as reference material for user-initiated operations and do not represent hidden or malicious command execution. - [CREDENTIALS_UNSAFE]: The SDK documentation correctly follows security best practices by advising developers to use environment variables (
os.getenv) or a Key Management Service (KMS) for managing sensitive information like API keys. - [SAFE]: The skill consists entirely of markdown reference material and source code snippets. No scripts or executable files are shipped with the skill.
- [SAFE]: No patterns of prompt injection, data exfiltration, obfuscation, or persistence mechanisms were found in the analyzed files.
Audit Metadata