arch-tsdown-monorepo

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines a git pre-commit hook using simple-git-hooks. The hook executes pnpm install and lint-staged. Security is prioritized through the use of --frozen-lockfile, --offline, and notably --ignore-scripts to prevent third-party package scripts from running during the hook execution.
  • [COMMAND_EXECUTION]: The export snapshot testing feature utilizes the tinyexec library to run pnpm ls locally. This is used for discovering workspace packages within the monorepo for manifest verification.
  • [EXTERNAL_DOWNLOADS]: The GitHub Actions configuration references sxzz/workflows and standard actions from the actions organization. These are used for continuous integration and automated publishing via npm Trusted Publisher.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 11:19 AM