Twenty CRM

• Analyzed: May 11, 2026, 5:36 AM
• Findings: 1
• Version: 0.0.2
• Hash: d82ea294675f15752d60c3a3cf109aa311182823174381352205fc7da0b0974f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a well-structured and security-conscious interface for interacting with a Twenty CRM instance. It includes robust input validation in `scripts/twenty-config.sh` (e.g., `validate_rest_path`) and uses Python to safely encode JSON payloads and query parameters, preventing injection vulnerabilities. The README.md explicitly documents security hardening measures taken to address previous flaws, and there is no evidence of malicious intent, data exfiltration, or unauthorized execution.