temporal-ops
Warn
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructions and recipes frequently access and manage sensitive files such as private keys (e.g., client.key, ca.key, new-ca.key) and mTLS certificates during rotation and diagnostic procedures.
- [CREDENTIALS_UNSAFE]: Diagnostic steps include commands like 'env | grep -i TEMPORAL_API_KEY' to check configuration, which can lead to the exposure of secret tokens in the agent's process logs and context.
- [COMMAND_EXECUTION]: The skill utilizes a wide array of networking and system utilities for troubleshooting connectivity and certificates, including nc, dig, nslookup, openssl, and grpcurl.
- [EXTERNAL_DOWNLOADS]: Instructions guide the user to fetch official vendor resources from Temporal's repositories, such as the temporalio/cloud-api repository and the Go SDK.
- [PROMPT_INJECTION]: The skill has a large attack surface as it processes untrusted data from user-pasted error messages and external Workflow Event Histories. While it includes safety disciplines, it lacks technical sanitization or boundary markers to prevent malicious instructions embedded in workflow data from influencing the agent's behavior.
Audit Metadata