fullstack-monorepo-setup
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to perform standard development tasks using commands like
pnpm install,pnpm build,npx expo start, andeas build. These are appropriate and necessary for the skill's primary purpose of workspace management. - [EXTERNAL_DOWNLOADS]: The instructions involve fetching packages and executing tools from official registries (npm) and well-known services (Expo, shadcn). These downloads originate from trusted ecosystems and are documented as standard procedure.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined names and options during the scaffolding process, creating a minimal attack surface. However, the use of official generators and mandatory verification steps mitigates the risk of malicious input influencing the agent's behavior.
Audit Metadata