clerk-monorepo
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate instructional content for managing a JavaScript monorepo.
- [EXTERNAL_DOWNLOADS]: The skill mentions downloading and installing standard development tools such as
pnpm,nvm,brew, and the1Password CLI. These are well-known, industry-standard tools and services used for repository setup and secure credential management. - [COMMAND_EXECUTION]: Instructions include the use of shell commands like
pnpm,turbo, andgitfor building, testing, and managing changesets. These operations are appropriate for the skill's purpose as a developer productivity tool. - [CREDENTIALS_UNSAFE]: The skill contains instructions for handling sensitive files used in integration testing, such as
.env.localand.keys.json. It correctly emphasizes that these files are gitignored and provides a secure method for fetching them via the 1Password CLI, which follows security best practices for secret management in a corporate development environment.
Audit Metadata