pnpm-workspace

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documentation establishes a secure and well-structured monorepo environment using pnpm workspaces.
  • [SAFE]: The API server guidelines include robust security configurations for logging (using Pino), specifically redacting sensitive headers like 'Authorization' and 'Cookie', and stripping query strings from request logs to prevent sensitive data leakage.
  • [SAFE]: It enforces contract-first development with OpenAPI, ensuring that all API inputs and outputs are strictly validated using generated Zod schemas, which mitigates injection and data integrity risks.
  • [SAFE]: The service routing architecture relies on a shared reverse proxy at localhost:80, preventing direct exposure of internal service ports and ensuring controlled traffic flow.
  • [SAFE]: All referenced workspace packages (e.g., @workspace/db, @workspace/api-zod) follow standard naming conventions and are consistent with the project's internal structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:13 PM