monorepo-management
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands for project initialization, build orchestration, and dependency management. These commands (e.g.,
turbo run,nx affected,pnpm install) are standard for the described monorepo management tasks. - [EXTERNAL_DOWNLOADS]: Mentions well-known developer tools and packages from the npm registry (Turborepo, Nx, React, TypeScript). These references are part of standard development configurations and are considered safe well-known service interactions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with project configuration files like
package.jsonandturbo.json. While this allows the agent to process data from a repository which could theoretically contain malicious instructions, the skill does not include any logic to bypass safety guardrails or execute unvalidated instructions found in those files.
Audit Metadata