turborepo
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of markdown-based documentation and reference material for Turborepo. It focuses on instructing an AI agent on how to correctly configure monorepo pipelines, tasks, and build optimizations.
- [SAFE]: All external references and URLs point to official Turborepo and Vercel domains (e.g., turborepo.dev, vercel.com), which are trusted sources for this technology.
- [SAFE]: Command examples provided in the documentation (such as
turbo run,npx turbo-ignore, and package manager installation commands) are standard industry practices for monorepo management and CI/CD workflows. - [SAFE]: No obfuscated code, hidden instructions, or attempts to bypass security filters were found during the analysis. The skill does not include any executable scripts, minimizing the risk of remote code execution or privilege escalation.
- [SAFE]: While the skill mentions sensitive environment variables like
TURBO_TOKEN, it only provides guidance on how to use them within standard CI environments and does not contain any hardcoded credentials.
Audit Metadata