shared-monorepo-pnpm-workspaces
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation for pnpm monorepo management, implementing pnpm v10 security features such as build approval allowlists.
- [EXTERNAL_DOWNLOADS]: CI/CD examples utilize trusted GitHub Actions from well-known organizations.
- Evidence: References to
pnpm/action-setup@v4,actions/setup-node@v4, andchangesets/action@v1inexamples/ci.mdrepresent standard industry practices. - [CREDENTIALS_UNSAFE]: The skill demonstrates secure handling of registry authentication by using environment variable placeholders.
- Evidence: Use of
${NPM_TOKEN}and${GITHUB_TOKEN}in.npmrcexamples withinexamples/core.mdandreference.mdavoids secret exposure. - [COMMAND_EXECUTION]: Shell commands for workspace management are limited to standard, benign pnpm operations.
- Evidence: The use of
--filterand recursive commands likepnpm -r buildinexamples/scripts.mdfollow standard automation patterns for monorepos.
Audit Metadata