turborepo

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Turborepo CLI (turbo, create-turbo) and standard package managers (bun, pnpm, npm, yarn) to orchestrate workspace tasks. It provides guidance on running builds, tests, and linting within a monorepo structure.
  • [EXTERNAL_DOWNLOADS]: Mentions official resources from the Vercel GitHub organization and well-known documentation sites for templates and configuration. It also identifies community-maintained remote cache implementations as optional self-hosting alternatives.
  • [DATA_EXFILTRATION]: Provides clear instructions on the secure management of sensitive environment variables such as TURBO_TOKEN and AWS_SECRET_ACCESS_KEY. It explicitly warns against printing secrets in logs and explains the use of passThroughEnv to keep secrets out of cache hashes.
  • [SAFE]: No evidence of prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation was found. The skill follows best practices for repository maintenance and deployment automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:02 PM
Security Audit — agent-trust-hub — turborepo