turborepo
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation repository and workflow guide for Turborepo. It contains standard instructional content, decision trees, and best practices for configuring monorepos.
- [EXTERNAL_DOWNLOADS]: All external references and URLs point to official or well-known services, including turborepo.dev, vercel.com, and trusted GitHub Actions (actions/checkout, actions/setup-node, pnpm/action-setup). These are used for standard configuration and CI/CD setups.
- [CREDENTIALS_UNSAFE]: While the documentation mentions environment variables like
TURBO_TOKENandTURBO_TEAM, it provides guidance on secure management using CI secrets (e.g., GitHub Secrets) and local.envfiles, which is aligned with industry best practices. - [COMMAND_EXECUTION]: The skill defines a command helper (
command/turborepo.md) that uses the agent's internal skill loading mechanism to surface relevant documentation. It does not perform any dangerous shell executions or process untrusted data in an unsafe manner.
Audit Metadata