monorepo-management

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive instructional content for setting up and managing monorepos. All code examples and configurations are standard for the described technology stack.
  • [COMMAND_EXECUTION]: The implementation playbook includes various command-line instructions for initializing projects (e.g., create-turbo, create-nx-workspace) and managing dependencies (e.g., pnpm add, turbo run). These are legitimate development operations and are clearly presented as user-facing instructions.
  • [EXTERNAL_DOWNLOADS]: The skill references official package registries and well-known documentation sites (e.g., turbo.build). It utilizes standard initialization tools (npx) which fetch packages from official registries.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates safe handling of sensitive credentials. For example, in the GitHub Actions configuration, it uses standard environment variable injection (${{ secrets.GITHUB_TOKEN }}) rather than hardcoding any secrets, which aligns with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 05:25 PM
Security Audit — agent-trust-hub — monorepo-management