twinmind-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands for verifying API health using
curland provides deployment scripts for Docker, Terraform, and Kubernetes. These commands are typical for infrastructure-as-code and service integration tasks. - [EXTERNAL_DOWNLOADS]: The skill interacts with
api.twinmind.comfor health checks and references standard container images from public registries (e.g.,node:20-alpine,redis:7-alpine). These external resources are consistent with the skill's primary purpose of deploying TwinMind integrations. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a standard attack surface for indirect prompt injection, as it includes tools capable of reading project files and executing shell commands based on the context of the deployment.
- Ingestion points: Project configuration and source files accessed via the
Readtool. - Boundary markers: None explicitly defined in the provided deployment templates to distinguish between instructions and data.
- Capability inventory: Full shell execution via
Bashand file system modification viaWriteandEdittools. - Sanitization: No input validation or sanitization is implemented in the provided CI/CD and infrastructure templates.
Audit Metadata