twinmind-upgrade-migration

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s overall purpose is plausible, and most actions fit SaaS upgrade/migration workflows, but key execution details are not verifiable from public TwinMind documentation. The main concerns are undocumented API/data flows, broader-than-needed Bash network capability, and forwarding the TwinMind API key into AWS. This is not confirmed malware, but it is not fully trustworthy as written.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
Apr 4, 2026, 07:34 PM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus%2Ftwinmind-upgrade-migration%2F@e46620fab973ed9f1483ba379790a6b6c81abd49