OpenAI Codex security directory

Temporal

Published by Temporal

High risk

Helps develop and operate durable workflows with Temporal. Build workflows, activities and workers, then debug retries, state and execution issues. Supports local development, self-hosted servers, Temporal Cloud and serverless workers.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Creates Cloud namespaces and deploys Lambda workers: Can deploy code, applications, containers, workflows, or infrastructure to a persistent environment.
  • Namespace/API-key/user deletion and batch terminate: Can delete records, files, projects, messages, or resources that may be difficult to recover.
  • Mints and rotates API keys, certs, SAML/SCIM and user management: Can create or change persistent records, files, projects, permissions, settings, or credentials.
  • Shell script installs CLIs, clones repos and eval-runs workers: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.
  • Sends Temporal Cloud user invitations: Can send messages, comments, invitations, posts, or published content attributed to the connected user.
  • Billable Cloud resources and capacity changes: Can initiate purchases, paid jobs, payments, refunds, infrastructure spend, or other financial activity.

Available capabilities

This add-on exposes 4 tools or capabilities.

  • temporal-cloud-setup
  • temporal-developer
  • temporal-ops
  • temporal-serverless

The interactive security report will load automatically.