monorepo-management
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructional content for setting up and managing monorepos. All code examples and configurations are standard for the described technology stack.
- [COMMAND_EXECUTION]: The implementation playbook includes various command-line instructions for initializing projects (e.g.,
create-turbo,create-nx-workspace) and managing dependencies (e.g.,pnpm add,turbo run). These are legitimate development operations and are clearly presented as user-facing instructions. - [EXTERNAL_DOWNLOADS]: The skill references official package registries and well-known documentation sites (e.g., turbo.build). It utilizes standard initialization tools (
npx) which fetch packages from official registries. - [CREDENTIALS_UNSAFE]: The skill demonstrates safe handling of sensitive credentials. For example, in the GitHub Actions configuration, it uses standard environment variable injection (
${{ secrets.GITHUB_TOKEN }}) rather than hardcoding any secrets, which aligns with security best practices.
Audit Metadata