Turborepo
v1.0.0WHAT: Turborepo monorepo build system - caching, task pipelines, and parallel execution for JS/TS projects. WHEN: User configures turbo.json, creates packages, sets up monorepo, shares code between apps, runs --affected builds, debugs cache misses, or has apps/packages directories. KEYWORDS: turborepo, turbo.json, monorepo, dependsOn, task pipeline, caching, remote cache, --filter, --affected, packages, workspace, pnpm workspace, npm workspace, build optimization
⭐ 0· 965·8 current·9 all-time
by@wpank
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included README and SKILL.md guidance; the skill is a documentation/instruction package for Turborepo and does not declare unrelated binaries, config paths, or credentials.
Instruction Scope
SKILL.md and command files instruct the agent to read the included reference docs and to advise edits to turbo.json and package.json and to run standard Turbo commands. The instructions reference environment variables and remote-cache tokens in the normal context of configuring CI/remote cache, but they do not instruct the agent to read or exfiltrate secrets or arbitrary system state. Users should be aware the skill's guidance includes file-modification recommendations (editing package.json, turbo.json, .turbo config), so any agent-initiated edits should be reviewed.
Install Mechanism
No install spec or code files to execute; this is an instruction-only skill (lowest install risk).
Credentials
The skill declares no required environment variables or credentials. The documentation sensibly describes TURBO_TOKEN, TURBO_TEAM, and signature keys for remote cache setups for CI—but these are contextual recommendations, not required by the skill. There is no unexplained request for secrets.
Persistence & Privilege
Skill is not always-on, user-invocable only. It does not request system-wide privileges or modify other skills' configs.
Assessment
This skill is a documentation-only helper for Turborepo and appears internally consistent. Before installing: (1) note the skill source/homepage is listed as unknown—prefer skills from trusted origins; (2) the guidance will recommend adding CI secrets (TURBO_TOKEN, TURBO_TEAM, remote cache keys) for remote caching—store those in your CI secret store, not in plaintext; (3) the agent may suggest edits to turbo.json or package.json; always review suggested changes or pull requests before applying; (4) follow the guidance about avoiding root .env files and not placing sensitive secrets in repo files. If you want stronger assurance, verify the skill files locally (the included SKILL.md and references) prior to installation.Like a lobster shell, security has layers — review code before you run it.
latestvk97eywycpc431dj2bfzxsqf7qx80w44x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
