The Agent Skills Directory

[SAFE]: The skill outlines standard configuration guidelines and command examples for monorepo maintenance. It emphasizes using local dependencies to avoid environment pollution and provides clear instructions for task orchestration and caching logic using official Turborepo schemas.
[COMMAND_EXECUTION]: The instructions include legitimate development commands such as pnpm init, pnpm add, and pnpm create. These are utilized for project initialization and dependency management within the workspace, which is the intended purpose of the skill.
[EXTERNAL_DOWNLOADS]: The skill references documentation and release notes from official sources like turborepo.dev and github.com/vercel. These are well-known, trusted organizations in the developer ecosystem, and their inclusion is documented neutrally without security concerns.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect injection as it reads project-specific configuration files (package.json, turbo.json). While it lacks explicit boundary markers or sanitization instructions for these inputs, it maintains a safe posture by operating as a standard developer utility without elevated privileges. Capability inventory is limited to project build tools (pnpm, cargo, go).

turborepo