mindtickle-reference-architecture
Provides a reference architecture for integrating MindTickle with a focus on tenant data isolation and sales enablement.
Install this skill
Security score
The mindtickle-reference-architecture skill was audited on May 26, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 82 | return `tenant:${tenantId}:${resource}`; |
Template literal with variable interpolation in command context
| 95 | const keys = await this.redis.keys(`tenant:${tenantId}:*`); |
Template literal with variable interpolation in command context
| 115 | await this.queue.publish(`tenant.${tenantId}.user_changed`, payload); |
Curl to non-GitHub URL
| 176 | curl http://localhost:3000/api/tenants/acme/users/u123/sync-progress |
Curl to non-GitHub URL
| 178 | curl -X POST http://localhost:3000/api/tenants/acme/readiness/aggregate |
Webhook reference - potential data exfiltration
| 27 | 2. Configure SCIM 2.0 webhook endpoints to receive HR system user events. |
Webhook reference - potential data exfiltration
| 41 | HR System --> SCIM Webhook Ingester --> User Sync Service --> MindTickle API |
Webhook reference - potential data exfiltration
| 105 | class ScimWebhookConsumer { |
Webhook reference - potential data exfiltration
| 159 | - Route SCIM webhooks to tenant-specific queue channels to prevent noisy-neighbor stalls |
External URL reference
| 176 | curl http://localhost:3000/api/tenants/acme/users/u123/sync-progress |
External URL reference
| 178 | curl -X POST http://localhost:3000/api/tenants/acme/readiness/aggregate |
External URL reference
| 183 | - [MindTickle Platform Integrations](https://www.mindtickle.com/platform/integrations/) |