Monorepo Management
v1.0.0Build and manage monorepos with Turborepo, Nx, and pnpm workspaces — covering workspace structure, dependency management, task orchestration, caching, CI/CD, and publishing. Use when setting up monorepos, optimizing builds, or managing shared packages.
⭐ 0· 826·1 current·2 all-time
by@wpank
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the content: SKILL.md contains step-by-step guidance for Turborepo, Nx, and pnpm workspace management. There are no unrelated credentials, binaries, or config paths requested that would be inconsistent with this purpose.
Instruction Scope
Instructions contain shell commands and config examples (pnpm, nx, turbo.json, .npmrc, package.json snippets). These are appropriate for setting up and operating monorepos. The doc references filesystem operations (e.g., rm -rf node_modules) and npx commands — expected for repository setup but potentially destructive if run blindly, so user review is advised before execution.
Install Mechanism
There is no install specification and no code files to execute (instruction-only). No downloads, archive extracts, or third-party install steps are embedded in the skill itself.
Credentials
The skill declares no required environment variables or credentials. The only config referenced is typical workspace config (.npmrc, turbo.json). Mention of globalDependencies like '**/.env.*local' is a cache/input concern for Turborepo and not an attempt to exfiltrate secrets; still, users should be mindful of sensitive data in local .env files.
Persistence & Privilege
always is false, no install actions, and the skill does not request persistent system privileges or attempt to modify other skills' configuration. It is user-invocable and may be invoked autonomously by the agent (platform default).
Assessment
This skill is a documentation-style helper for monorepos and appears internally consistent. Before using it, review any commands the agent proposes to run (especially ones that remove files or run npx), confirm package versions and registry/auth settings for private packages, and avoid running destructive commands blindly. Also verify installation instructions in the README (the example npx add URL looks like a raw GitHub tree path and may not be a direct installable package) before executing them.Like a lobster shell, security has layers — review code before you run it.
latestvk97a1j0b5vv1erx0wm8s8vv5nd80w01j
License
MIT-0
Free to use, modify, and redistribute. No attribution required.