monorepo-management

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell commands for project initialization, build orchestration, and dependency management. These commands (e.g., turbo run, nx affected, pnpm install) are standard for the described monorepo management tasks.
  • [EXTERNAL_DOWNLOADS]: Mentions well-known developer tools and packages from the npm registry (Turborepo, Nx, React, TypeScript). These references are part of standard development configurations and are considered safe well-known service interactions.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with project configuration files like package.json and turbo.json. While this allows the agent to process data from a repository which could theoretically contain malicious instructions, the skill does not include any logic to bypass safety guardrails or execute unvalidated instructions found in those files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 01:00 PM