turborepo-monorepo
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): All analyzed files contain standard configuration patterns for Turborepo and related web technologies. There is no evidence of prompt injection, obfuscation, or malicious persistence mechanisms.
- [DATA_EXFILTRATION] (SAFE): Sensitive environment variable names like
JWT_SECRETandDATABASE_URLare referenced inturbo.jsonto ensure proper cache invalidation, which is a best practice. No actual secrets are hardcoded. - [EXTERNAL_DOWNLOADS] (SAFE): The CI/CD workflows utilize well-known GitHub Actions and standard package managers like pnpm and npm without pointing to untrusted or high-risk external scripts.
- [COMMAND_EXECUTION] (SAFE): Shell commands are strictly limited to standard development tasks such as building, testing, linting, and deployment using verified tools.
Audit Metadata