How does this skill handle TwinMind API keys?

It provides implementation patterns for storing keys in environment variables or cloud secrets managers (like Google Cloud Secret Manager) rather than hardcoding them in your source code.

Is this skill helpful for GDPR compliance?

Yes, it facilitates compliance by implementing data residency controls, encryption, audit logging, and automated PII redaction features.

How is transcript data protected at rest?

The skill utilizes AES-256-GCM encryption with unique initialization vectors (IVs) and authentication tags to ensure your stored data is both private and tamper-proof.

Can I automatically redact sensitive information from transcripts?

Yes, the skill includes a PII redaction engine that uses regex patterns to identify and mask emails, SSNs, and credit card numbers within transcript text.

Does it support webhook security?

Absolutely. It implements timing-safe HMAC SHA-256 signature verification to prevent spoofing and timing attacks on your TwinMind webhook endpoints.

TwinMind Security Implementation

Name: TwinMind Security Implementation
Author: jeremylongshore

byjeremylongshore

•

1,440

•

Security & Testing

Implements enterprise-grade security protocols and data protection for TwinMind API integrations and meeting transcription workflows.

This skill provides standardized patterns for securing TwinMind integrations, ensuring that sensitive meeting data and API credentials remain protected throughout the transcription lifecycle. It automates the implementation of critical security measures including AES-256-GCM encryption for transcripts at rest, timing-safe HMAC webhook signature verification, and robust Role-Based Access Control (RBAC). By providing pre-configured privacy settings and automated PII redaction logic, it helps developers maintain compliance with global data standards while adhering to the principle of least privilege for audio processing and data retention.

Key Features

01Automated PII redaction and privacy-first data retention policies

02Timing-safe HMAC SHA-256 webhook signature verification

03Secure API key management via environment variables and cloud secrets managers

04AES-256-GCM encryption for transcript data at rest

051,440 GitHub stars

06Granular Role-Based Access Control (RBAC) with Express middleware

Use Cases

01Securing sensitive corporate meeting transcripts for compliance and auditing

02Configuring secure webhook endpoints to handle real-time transcription events safely

03Implementing multi-tenant access control for TwinMind-powered SaaS applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills twinmind-security-basics

For use in Claude.ai and ChatGPT

Download Skill

Key Features

01Automated PII redaction and privacy-first data retention policies

02Timing-safe HMAC SHA-256 webhook signature verification

03Secure API key management via environment variables and cloud secrets managers

04AES-256-GCM encryption for transcript data at rest

051,440 GitHub stars

06Granular Role-Based Access Control (RBAC) with Express middleware

Use Cases

01Securing sensitive corporate meeting transcripts for compliance and auditing

02Configuring secure webhook endpoints to handle real-time transcription events safely

03Implementing multi-tenant access control for TwinMind-powered SaaS applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills twinmind-security-basics

For use in Claude.ai and ChatGPT

Download Skill