minds-dev-workflow
Facilitates the end-to-end development workflow for the minds app stack, ensuring synchronization and iteration with Docker.
Install this skill
or
58/100
Security score
The minds-dev-workflow skill was audited on Jun 3, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 112
Template literal with variable interpolation in command context
SourceSKILL.md
| 112 | ```bash |
medium line 120
Template literal with variable interpolation in command context
SourceSKILL.md
| 120 | ```bash |
low line 56
Access to hidden dotfiles in home directory
SourceSKILL.md
| 56 | # ~/.minds-dev-<your-user>/ if it doesn't exist. |
medium line 125
Access to hidden dotfiles in home directory
SourceSKILL.md
| 125 | Do NOT use a key from `~/.mngr/profiles/...` -- that belongs to non-minds mngr agents and will silently fail with "Permission denied (publickey)". Likewise do NOT use a key from a different activated |
medium line 138
Access to hidden dotfiles in home directory
SourceSKILL.md
| 138 | | `just deploy [--yes-i-mean-<tier>]` | Run `minds env deploy` on the activated env. For dev envs: provisions Modal env / Neon / SuperTokens + deploys both Modal apps + writes `~/.minds-<env>/{client. |
medium line 199
Access to hidden dotfiles in home directory
SourceSKILL.md
| 199 | | `~/.minds/logs/minds.log`, `~/.minds/logs/minds-events.jsonl` | Minds backend (production) | |
medium line 200
Access to hidden dotfiles in home directory
SourceSKILL.md
| 200 | | `~/.minds-<env-name>/logs/minds.log`, `~/.minds-<env-name>/logs/minds-events.jsonl` | Minds backend (per-env) | |
medium line 202
Access to hidden dotfiles in home directory
SourceSKILL.md
| 202 | ### Cleaning up the legacy `~/.devminds/` |
medium line 204
Access to hidden dotfiles in home directory
SourceSKILL.md
| 204 | If you used the pre-refactor layout (`~/.devminds/` for all dev iteration plus `~/.devminds/envs/<dev-name>.toml` per-env overrides), that root is now obsolete. No migration script -- just `rm -rf ~/. |
low line 235
Access to .env file
SourceSKILL.md
| 235 | source .env |
Scanned on Jun 3, 2026
View Security DashboardGitHub Stars 381
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
claudefrontendplaywrightgitapitestingdevopsbackenddevops-srebackend-developerfullstack-developerdockerdevelopment
imbue-ai/mngr