twinmind-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill primarily serves as documentation and a reference guide for production deployment, containing standard industry checklists for security (HTTPS, CSP, SQLi protection), data privacy (PII redaction, encryption at rest), and infrastructure stability.
- [COMMAND_EXECUTION]: Includes a diagnostic shell script (
pre-launch-check.sh) designed to verify the environment. The script performs connectivity tests usingcurlto the official API endpoint (api.twinmind.com). These network operations are consistent with the skill's purpose of validating service availability. - [DATA_EXFILTRATION]: The verification script checks for the presence of sensitive environment variables such as
TWINMIND_API_KEYandDATABASE_URL. It includes logic to verify the length of encryption keys and logs the first 10 characters of the API key for confirmation. These actions occur within the user's environment to ensure correct configuration before launch.
Audit Metadata