monorepo-management

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The provided example script scripts/orchestrate.ts utilizes child_process.spawn to execute commands via the system shell (sh -c).
  • Ingestion points: Task commands defined within the TaskConfig objects in scripts/orchestrate.ts.
  • Boundary markers: None identified in the example code to delimit user-provided strings from executable commands.
  • Capability inventory: The script has the capability to execute arbitrary subprocesses through spawn.
  • Sanitization: No sanitization or validation of the task.command string is performed before execution.
  • [EXTERNAL_DOWNLOADS]: The skill correctly references official resources from trusted organizations, including schema definitions from Turborepo (turbo.build) and Nx (nx.dev), as well as standard GitHub Actions for workflow automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 03:06 AM