nx-workspace-patterns

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides templates and instructions for running standard Nx CLI operations, including nx affected, nx migrate, and nx generate. These are routine commands for monorepo maintenance.
  • [EXTERNAL_DOWNLOADS]: The documentation references official and community-standard plugins such as nx-cloud and @nx-aws-cache/nx-aws-cache for remote caching capabilities.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates secure secret handling by using GitHub Action secrets (${{ secrets.NX_CLOUD_ACCESS_TOKEN }}) and generic placeholders (your-nx-cloud-token) for configuration templates.
  • [PROMPT_INJECTION]: The skill includes a custom generator template that processes user-defined inputs like project names and scopes.
  • Ingestion points: name, scope, and directory variables in the FeatureLibraryGeneratorSchema.
  • Boundary markers: None explicitly defined in the TypeScript generator template.
  • Capability inventory: The generator uses @nx/devkit functions (generateFiles, libraryGenerator) to perform file system writes and project configurations.
  • Sanitization: The provided template does not include explicit input validation, relying on the underlying Nx devkit's handling of file paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 10:29 PM