shared-monorepo-pnpm-workspaces

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation for pnpm monorepo management, implementing pnpm v10 security features such as build approval allowlists.
  • [EXTERNAL_DOWNLOADS]: CI/CD examples utilize trusted GitHub Actions from well-known organizations.
  • Evidence: References to pnpm/action-setup@v4, actions/setup-node@v4, and changesets/action@v1 in examples/ci.md represent standard industry practices.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates secure handling of registry authentication by using environment variable placeholders.
  • Evidence: Use of ${NPM_TOKEN} and ${GITHUB_TOKEN} in .npmrc examples within examples/core.md and reference.md avoids secret exposure.
  • [COMMAND_EXECUTION]: Shell commands for workspace management are limited to standard, benign pnpm operations.
  • Evidence: The use of --filter and recursive commands like pnpm -r build in examples/scripts.md follow standard automation patterns for monorepos.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 06:27 PM