monorepo-management

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational content and boilerplate configurations for monorepo management. The instructions and scripts align with documented best practices for the mentioned tools (Turborepo, Nx, pnpm).
  • [COMMAND_EXECUTION]: The shell commands provided (e.g., npx create-turbo, pnpm --filter) are standard CLI operations for project initialization and task orchestration. No suspicious or obfuscated commands were detected.
  • [EXTERNAL_DOWNLOADS]: The skill references official and well-known GitHub Actions (e.g., actions/checkout, pnpm/action-setup) and standard package registries. These are recognized as safe, trusted sources for development and CI/CD workflows.
  • [CREDENTIALS_UNSAFE]: All examples involving secrets, such as GitHub Actions environment variables, use proper variable interpolation (${{ secrets.NPM_TOKEN }}) instead of hardcoding sensitive information.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:40 PM