shared-monorepo-nx
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official plugins and tools from the
@nx/ecosystem and well-known services. - Evidence: References official plugins such as
@nx/vite,@nx/react, and@nx/eslintinSKILL.mdandexamples/core.md. - Evidence: Utilizes official GitHub Actions like
actions/checkout@v4andactions/setup-node@v4inexamples/ci.md. - [REMOTE_CODE_EXECUTION]: The skill describes the use of
nx migrate --run-migrations, which is a standard feature for updating monorepo dependencies and applying configuration changes. - Evidence: Documentation for updating the workspace in
examples/generators.mduses the standardnx migratecommand flow. - [DATA_EXFILTRATION]: The skill uses safe placeholders for sensitive tokens and standard practices for environment variable management.
- Evidence: Uses secret placeholders like
${{ secrets.NX_CLOUD_ACCESS_TOKEN }}inexamples/ci.md. - Evidence: Correctly identifies that
.envfiles should be included in global inputs for cache invalidation without exposing their contents to external parties inexamples/tasks.md. - [INDIRECT_PROMPT_INJECTION]: The skill operates on workspace configuration files (
nx.json,project.json) which defines the execution surface of the build system. - Ingestion points: Configuration files like
nx.jsonandproject.jsonmentioned inSKILL.md. - Boundary markers: None; behavior is governed by the Nx task runner logic.
- Capability inventory: The skill describes capabilities for task execution, file generation, and network access to Nx Cloud.
- Sanitization: Relies on the standard Nx plugin architecture to safely parse and execute inferred tasks.
Audit Metadata