turborepo
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and operational guide for managing Turborepo monorepos. It emphasizes best practices that enhance security and maintainability.
- [SAFE]: Secret management guidance (e.g., handling
TURBO_TOKEN,DATABASE_URL, andAWS_ACCESS_KEY_ID) correctly recommends using environment variables and repository secrets (like GitHub Actions secrets) rather than hardcoding credentials. - [SAFE]: All external references point to official and well-known domains, including
turborepo.dev,vercel.com, andgithub.com. No suspicious or untrusted third-party URLs were found. - [SAFE]: The skill uses standard package management commands (npm, pnpm, yarn, bun) and does not exhibit any signs of command injection, remote code execution, or data exfiltration.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected across the analyzed files.
Audit Metadata