nx-monorepo

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous commands for workspace management, project generation, and task execution using nx, npx, and npm. These are standard operations for managing a TypeScript/JavaScript monorepo.
  • [EXTERNAL_DOWNLOADS]: The skill instructions involve downloading and installing official Nx packages and plugins from the npm registry using npx, npm install, and nx add. All referenced packages (e.g., @nx/react, @nx/nest, @nx/js) are part of the official Nx ecosystem.
  • [PRIVILEGE_ESCALATION]: The references/basics.md file includes instructions for a global installation of Nx on Linux systems using sudo to add the official nrwl/nx PPA and install the package. This is a standard procedure for system-wide CLI installation.
  • [INDIRECT_PROMPT_INJECTION]: As a developer tool, the skill is designed to interact with and process local project files, such as project.json, nx.json, and source code. While these files are external data sources, the skill follows standard development workflows and does not expose unsafe capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:09 AM
Security Audit — agent-trust-hub — nx-monorepo