turborepo

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as an educational and operational guide for managing Turborepo monorepos. It emphasizes best practices that enhance security and maintainability.
  • [SAFE]: Secret management guidance (e.g., handling TURBO_TOKEN, DATABASE_URL, and AWS_ACCESS_KEY_ID) correctly recommends using environment variables and repository secrets (like GitHub Actions secrets) rather than hardcoding credentials.
  • [SAFE]: All external references point to official and well-known domains, including turborepo.dev, vercel.com, and github.com. No suspicious or untrusted third-party URLs were found.
  • [SAFE]: The skill uses standard package management commands (npm, pnpm, yarn, bun) and does not exhibit any signs of command injection, remote code execution, or data exfiltration.
  • [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected across the analyzed files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 06:59 PM