monorepo-navigator

Monorepo Navigator

This is a coherent, instruction-only monorepo guide. Before running anything from it: 1) review any commands that rewrite git history (git filter-repo) and make backups (clone, create tags, or mirror the repo) — those commands are destructive if misused; 2) inspect any example scripts that execute shell commands (the Node execSync example) before running them in your workspace; 3) remote cache configuration mentions TURBO_TOKEN / TURBO_TEAM / TURBO_API — only provide tokens or point caches at servers you trust (a malicious or misconfigured cache endpoint could receive build artifacts or metadata); 4) the examples clone from example GitHub URLs — replace with your real remotes and avoid running commands that fetch/merge unknown repos. If you want greater assurance, ask the skill author for a smaller, non-destructive demo or run commands in an isolated sandbox copy of your repo first.

Type: OpenClaw Skill Name: monorepo-navigator Version: 1.0.0 The monorepo-navigator skill bundle provides comprehensive documentation, configuration templates, and best practices for managing monorepos using Turborepo, Nx, and pnpm. While it includes a helper script (scripts/gen-dep-graph.js) that uses Node.js child_process.execSync to query package information, the usage is legitimate and scoped to the stated purpose. No evidence of data exfiltration, malicious execution, or prompt injection was found across SKILL.md or the reference documentation.