modern-tooling
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a guide for project configuration, providing templates for ESLint, TypeScript, and monorepos using industry-standard tools.
- [SAFE]: Employs security best practices by recommending the
--ignore-scriptsflag in git hooks to prevent the execution of potentially malicious scripts during dependency installation. - [SAFE]: All external tools and packages mentioned (such as pnpm, ESLint, Vitest, and Turborepo) are well-known, legitimate utilities within the JavaScript ecosystem.
- [SAFE]: Environment variable management follows standard practices, recommending the use of
.gitignorefor.envfiles and utilizing GitHub Secrets for CI/CD authentication tokens.
Audit Metadata