twinmind-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various shell commands for audio processing (ffmpeg, ffprobe) and network diagnostics (curl, telnet, dig). These tools are used appropriately to verify file integrity and API connectivity during troubleshooting.
- [PRIVILEGE_ESCALATION]: The instructions include usage of the
tccutilcommand to reset microphone permissions for Chrome on macOS. While this modifies system-level privacy settings, it is a standard and necessary solution for the specific error of microphone access being denied. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by analyzing error messages from consoles and APIs. 1. Ingestion points: Error messages from console logs, extension popups, and API responses. 2. Boundary markers: No explicit markers are defined to isolate untrusted error data. 3. Capability inventory: Includes tool access for Bash (curl, ffmpeg), Grep, and Read. 4. Sanitization: No specific sanitization methods for ingested error content are documented.
- [SAFE]: All external network operations target the vendor's official domain (twinmind.com), and the use of environment variables for API key management follows secure practices.
Audit Metadata