📦

nx-workspace

Name: nx-workspace
Author: nrwl

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle

Explore and Diagnose Nx Workspaces

Nx monorepos hide resolved targets, dependencies, and affected projects behind layered configuration. This skill uses Nx JSON output and command-line filters to produce precise workspace answers.

Unterstützt: Claude Codex Code(CC)

📊 66 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "nx-workspace" from https://skillstore.io/skills/nrwl-nx-workspace.md and its manifest at https://skillstore.io/api/skills/nrwl-nx-workspace/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/nrwl-nx-workspace.md Signiertes manifest GET /api/skills/nrwl-nx-workspace/manifest Signiertes lockfile GET /api/skills/nrwl-nx-workspace/lockfile

Testen

„nx-workspace“ wird verwendet. List applications and show which ones provide a build target.

Erwartetes Ergebnis:

Applications: storefront, admin, and api. storefront and admin provide build targets; api exposes serve and test only.

„nx-workspace“ wird verwendet. What depends on shared-ui?

Erwartetes Ergebnis:

Direct dependents: storefront and admin. No other project has a direct dependency on shared-ui.

„nx-workspace“ wird verwendet. Why does api:lint fail with missing configuration?

Erwartetes Ergebnis:

The resolved api configuration has build, serve, and test targets, but no lint target. Add or infer lint configuration before running api:lint.

Sicherheitsaudit

Mittleres Risiko

v1 • 27.8.2026 Versionsbericht öffnen

All 47 external-command findings are false positives caused by Markdown backticks and fenced examples, not Ruby or shell command substitution. Both sensitive-file findings are jq `.key` projections, not certificate or private-key access. Semantic review found that `nx sync` and `nx reset` can alter workspace or cache state despite the read-only claim.

Gescannte Dateien

315

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

SKILL.md:8 SKILL.md:283-285

Read-only Claim Conflicts With State-changing Commands

The skill declares read-only exploration, then recommends nx sync and nx reset. These commands can change workspace files or clear local Nx state.

The contradiction is explicit. Nx sync and nx reset are operational commands rather than read-only inspection.

Risikofaktoren

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/nrwl-nx-workspace/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/nrwl-nx-workspace/security.svg)](https://skillstore.io/skills/nrwl-nx-workspace?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/nrwl-nx-workspace?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nrwl-nx-workspace/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/nrwl-nx-workspace.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

nrwl. (2026). nx-workspace security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/nrwl-nx-workspace/audits/1

BibTeX-Zitat

@techreport{nrwl-nrwl-nx-workspace-2026,
  author = {nrwl},
  title = {nx-workspace security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/nrwl-nx-workspace/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nx-workspace security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "nrwl"
date-released: "2026-08-27"
url: "https://skillstore.io/skills/nrwl-nx-workspace/audits/1"
identifiers:
  - type: other
    value: "skillstore:nrwl-nx-workspace:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Map an unfamiliar monorepo

List applications and libraries, inspect their tags, and trace dependencies before making a change.

Audit target configuration

Compare resolved build, test, and lint targets across projects without relying on partial project files.

Scope continuous integration

Identify affected projects for a branch or commit range and confirm each required target exists.

Diese Prompts ausprobieren

List workspace projects

List every project in this Nx workspace. Group applications and libraries, then note each project with a build target.

Inspect one project

Inspect the resolved configuration for [project]. Summarize its root, tags, targets, executors, inputs, and outputs.

Trace dependencies

Show what [project] depends on and which projects depend on it. Use the Nx project graph and summarize dependency types.

Diagnose an affected target

Find projects affected between [base] and [head]. Verify their [target] configuration and explain any missing or inconsistent targets.

Bewährte Praktiken

Use Nx JSON output for project, target, and graph questions.
Inspect resolved project configuration instead of relying only on project.json.
Review repository trust and pending changes before running any state-changing command.

Vermeiden

Do not count or parse complex terminal output manually when structured output exists.
Do not assume every project exposes standard build, test, or lint targets.
Do not run nx sync or nx reset as read-only diagnostics without explicit approval.

Häufig gestellte Fragen

Does this skill change source files?

Most exploration commands are read-only. The documented nx sync command can update workspace files, so review and approve it separately.

Does it require a global Nx installation?

No. It can use npx, pnpx, or yarn according to the workspace package manager and lockfile.

Why inspect resolved project configuration?

Nx plugins can infer targets that project.json does not contain. The resolved configuration includes those inferred targets.

Can it find affected projects?

Yes. It supports automatic bases, explicit branches, commit ranges, uncommitted changes, and untracked files.

Can it explain project dependencies?

Yes. It uses printed project graph data to identify dependencies and reverse dependents.

What tools improve structured analysis?

Nx JSON output is primary. jq supports filtering, selection, counting, and extraction from that output.

Entwicklerdetails

Autor

nrwl

Lizenz

MIT

Skillstore-Revision

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/nrwl/nx-ai-agents-config/tree/aa363e4a85f11d836c21e5d1e7f6c333caab2590/skills/nx-workspace

Ref.

f6cdb76d1aa56a8781522efba21cd0d656ccc802

Aktualität der Wartung

28.8.2026

Nutzung

1 Downloads · 0 Aufrufe

Dateistruktur

📁 references/

📄 AFFECTED.md

📄 SKILL.md