turborepo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and guidance for Turborepo monorepo management. It follows best practices and does not contain malicious code, instructions, or injection patterns.\n- [EXTERNAL_DOWNLOADS]: The documentation references official Vercel and Turborepo resources (e.g., turborepo.dev, vercel.com) and well-known developer tools (e.g., pnpm, bun, syncpack, manypkg). These references are informative and target trusted organizations or established services.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user input in command/turborepo.md to select relevant documentation, presenting a standard attack surface.\n
- Ingestion points: User input via $ARGUMENTS in command/turborepo.md determines which reference files are read.\n
- Boundary markers (absent): No explicit delimiters or instructions to ignore embedded instructions are present.\n
- Capability inventory: Limited to loading the skill and reading markdown documentation files.\n
- Sanitization (absent): No input sanitization is observed for the topic selection logic.
Audit Metadata