skills/j4flmao/agent-skills/monorepo/Gen Agent Trust Hub

monorepo

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references standard bootstrapping and initialization commands that fetch code from official package registries.
  • Evidence in SKILL.md and references/nx-guide.md: npx create-nx-workspace@latest, npx create-turbo@latest, and npx nx@latest init.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of development tools and task runners which is the intended purpose of a monorepo management utility.
  • Evidence in SKILL.md: nx build app, nx affected, and turbo run build.
  • [DATA_EXFILTRATION]: While the skill mentions the use of access tokens for remote caching services (Nx Cloud, Vercel), it correctly identifies these as sensitive and provides guidance on using CI/CD secrets to avoid repository exposure.
  • Evidence in SKILL.md: 'Nx Cloud access tokens must be stored as CI secrets — never commit to repository'.
  • [OTHER]: Several reference files (e.g., references/architecture-patterns.md, references/performance-optimization.md) contain large amounts of repetitive technical filler text. While this is an unusual authoring practice, the content itself consists of benign technical specifications and examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 06:38 PM
Security Audit — agent-trust-hub — monorepo