skills/vercel/turborepo/turborepo/Gen Agent Trust Hub

turborepo

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFE
Full Analysis
  • [Secure Configuration Practices]: The skill strongly advocates for 'Package Tasks' over 'Root Tasks', which promotes isolation and reduces the risk of unintended command execution at the repository level. It also provides clear instructions on using .env files and environment variables correctly within the Turborepo hashing system to ensure cache integrity.
  • [Trusted Source References]: All documentation and external links point to official Turborepo and Vercel domains (turborepo.dev, vercel.com) or established community tools. Remote code patterns are limited to well-known and official GitHub Actions (actions/setup-node, pnpm/action-setup, etc.).
  • [Dependency Management]: The skill recommends standard community tools for maintaining dependency health (such as syncpack and manypkg) and explains how to use them safely within a monorepo structure.
  • [Environment Variable Handling]: Instructions regarding sensitive variables like TURBO_TOKEN or GITHUB_TOKEN correctly identify them as credentials and guide the user to handle them via environment variables or CI secrets rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 01:48 PM