monorepo-management
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and boilerplate configuration for established, well-known monorepo tools. No malicious patterns or security vulnerabilities were detected.
- [SAFE]: Command execution patterns are restricted to standard development workflows using package managers (
npx,pnpm,turbo) for project initialization and build tasks. - [SAFE]: Secret management in the provided GitHub Actions workflow example adheres to best practices by using encrypted secrets (
${{ secrets.NPM_TOKEN }}) rather than hardcoded credentials. - [SAFE]: Configuration for environment files (e.g.,
.env.*localinturbo.json) is standard for build system cache invalidation and does not involve unauthorized data access or exfiltration.
Audit Metadata