turborepo
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Turborepo CLI (
turbo,create-turbo) and standard package managers (bun,pnpm,npm,yarn) to orchestrate workspace tasks. It provides guidance on running builds, tests, and linting within a monorepo structure. - [EXTERNAL_DOWNLOADS]: Mentions official resources from the Vercel GitHub organization and well-known documentation sites for templates and configuration. It also identifies community-maintained remote cache implementations as optional self-hosting alternatives.
- [DATA_EXFILTRATION]: Provides clear instructions on the secure management of sensitive environment variables such as
TURBO_TOKENandAWS_SECRET_ACCESS_KEY. It explicitly warns against printing secrets in logs and explains the use ofpassThroughEnvto keep secrets out of cache hashes. - [SAFE]: No evidence of prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation was found. The skill follows best practices for repository maintenance and deployment automation.
Audit Metadata