monorepo-deps

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill detects if 'syncpack' or '@manypkg/cli' are missing and explicitly requests user consent before installing them from the npm registry, an established package service.
  • [COMMAND_EXECUTION]: Shell execution is limited to standard Node.js development tools (npm, npx) for auditing, fixing, and updating project dependencies according to the skill's stated purpose.
  • [SAFE]: The skill implements strict boundary checks, such as aborting if non-npm lockfiles (pnpm, yarn) are detected, and enforces verification steps before completing tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 11:12 AM