twinmind-upgrade-migration
Warn
Audited by Socket on Apr 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s overall purpose is plausible, and most actions fit SaaS upgrade/migration workflows, but key execution details are not verifiable from public TwinMind documentation. The main concerns are undocumented API/data flows, broader-than-needed Bash network capability, and forwarding the TwinMind API key into AWS. This is not confirmed malware, but it is not fully trustworthy as written.
Confidence: 83%Severity: 61%
Audit Metadata