temporal-python-testing

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill includes scripts and examples that fetch and load production workflow histories (e.g., resources/replay-testing.md and scripts/export_histories.py which connect to production.temporal.io and call handle.fetch_history(), and tests/replay/test_workflow_replay.py which reads those history files and replays them), so the agent is expected to ingest and interpret untrusted, user-generated third-party workflow histories as part of its workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 10:18 PM