monorepo
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard bootstrapping and initialization commands that fetch code from official package registries.
- Evidence in
SKILL.mdandreferences/nx-guide.md:npx create-nx-workspace@latest,npx create-turbo@latest, andnpx nx@latest init. - [COMMAND_EXECUTION]: The skill facilitates the execution of development tools and task runners which is the intended purpose of a monorepo management utility.
- Evidence in
SKILL.md:nx build app,nx affected, andturbo run build. - [DATA_EXFILTRATION]: While the skill mentions the use of access tokens for remote caching services (Nx Cloud, Vercel), it correctly identifies these as sensitive and provides guidance on using CI/CD secrets to avoid repository exposure.
- Evidence in
SKILL.md: 'Nx Cloud access tokens must be stored as CI secrets — never commit to repository'. - [OTHER]: Several reference files (e.g.,
references/architecture-patterns.md,references/performance-optimization.md) contain large amounts of repetitive technical filler text. While this is an unusual authoring practice, the content itself consists of benign technical specifications and examples.
Audit Metadata