📦

nx-workspace

Name: nx-workspace
Author: nrwl

Révision du contenu r1 Risque moyen ⚙️ Commandes externes

Explore and Diagnose Nx Workspaces

Nx monorepos hide resolved targets, dependencies, and affected projects behind layered configuration. This skill uses Nx JSON output and command-line filters to produce precise workspace answers.

Prend en charge: Claude Codex Code(CC)

📊 66 Adéquat

Maintain this Skill? Claim it 📊 66 Adéquat

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "nx-workspace" from https://skillstore.io/skills/nrwl-nx-workspace.md and its manifest at https://skillstore.io/api/skills/nrwl-nx-workspace/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/nrwl-nx-workspace.md manifest signé GET /api/skills/nrwl-nx-workspace/manifest lockfile signé GET /api/skills/nrwl-nx-workspace/lockfile

Tester

Utilisation de « nx-workspace ». List applications and show which ones provide a build target.

Résultat attendu:

Applications: storefront, admin, and api. storefront and admin provide build targets; api exposes serve and test only.

Utilisation de « nx-workspace ». What depends on shared-ui?

Résultat attendu:

Direct dependents: storefront and admin. No other project has a direct dependency on shared-ui.

Utilisation de « nx-workspace ». Why does api:lint fail with missing configuration?

Résultat attendu:

The resolved api configuration has build, serve, and test targets, but no lint target. Add or infer lint configuration before running api:lint.

Audit de sécurité

Risque moyen

v1 • 27/08/2026 Ouvrir le rapport versionné

All 47 external-command findings are false positives caused by Markdown backticks and fenced examples, not Ruby or shell command substitution. Both sensitive-file findings are jq `.key` projections, not certificate or private-key access. Semantic review found that `nx sync` and `nx reset` can alter workspace or cache state despite the read-only claim.

Fichiers analysés

315

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Moyen

SKILL.md:8 SKILL.md:283-285

Read-only Claim Conflicts With State-changing Commands

The skill declares read-only exploration, then recommends nx sync and nx reset. These commands can change workspace files or clear local Nx state.

The contradiction is explicit. Nx sync and nx reset are operational commands rather than read-only inspection.

Facteurs de risque

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/nrwl-nx-workspace/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/nrwl-nx-workspace/security.svg)](https://skillstore.io/skills/nrwl-nx-workspace?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/nrwl-nx-workspace?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nrwl-nx-workspace/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/nrwl-nx-workspace.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

nrwl. (2026). nx-workspace security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/nrwl-nx-workspace/audits/1

Citation BibTeX

@techreport{nrwl-nrwl-nx-workspace-2026,
  author = {nrwl},
  title = {nx-workspace security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/nrwl-nx-workspace/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nx-workspace security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "nrwl"
date-released: "2026-08-27"
url: "https://skillstore.io/skills/nrwl-nx-workspace/audits/1"
identifiers:
  - type: other
    value: "skillstore:nrwl-nx-workspace:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Map an unfamiliar monorepo

List applications and libraries, inspect their tags, and trace dependencies before making a change.

Audit target configuration

Compare resolved build, test, and lint targets across projects without relying on partial project files.

Scope continuous integration

Identify affected projects for a branch or commit range and confirm each required target exists.

Essayez ces prompts

List workspace projects

List every project in this Nx workspace. Group applications and libraries, then note each project with a build target.

Inspect one project

Inspect the resolved configuration for [project]. Summarize its root, tags, targets, executors, inputs, and outputs.

Trace dependencies

Show what [project] depends on and which projects depend on it. Use the Nx project graph and summarize dependency types.

Diagnose an affected target

Find projects affected between [base] and [head]. Verify their [target] configuration and explain any missing or inconsistent targets.

Bonnes pratiques

Use Nx JSON output for project, target, and graph questions.
Inspect resolved project configuration instead of relying only on project.json.
Review repository trust and pending changes before running any state-changing command.

Éviter

Do not count or parse complex terminal output manually when structured output exists.
Do not assume every project exposes standard build, test, or lint targets.
Do not run nx sync or nx reset as read-only diagnostics without explicit approval.

Foire aux questions

Does this skill change source files?

Most exploration commands are read-only. The documented nx sync command can update workspace files, so review and approve it separately.

Does it require a global Nx installation?

No. It can use npx, pnpx, or yarn according to the workspace package manager and lockfile.

Why inspect resolved project configuration?

Nx plugins can infer targets that project.json does not contain. The resolved configuration includes those inferred targets.

Can it find affected projects?

Yes. It supports automatic bases, explicit branches, commit ranges, uncommitted changes, and untracked files.

Can it explain project dependencies?

Yes. It uses printed project graph data to identify dependencies and reverse dependents.

What tools improve structured analysis?

Nx JSON output is primary. jq supports filtering, selection, counting, and extraction from that output.

Détails du développeur

Auteur

nrwl

Licence

MIT

Révision Skillstore

Avis de version

L’auteur n’a déclaré aucune version.

Dépôt

https://github.com/nrwl/nx-ai-agents-config/tree/aa363e4a85f11d836c21e5d1e7f6c333caab2590/skills/nx-workspace

Réf

f6cdb76d1aa56a8781522efba21cd0d656ccc802

Récence de maintenance

28/08/2026

Utilisation

1 téléchargements · 0 vues

Structure de fichiers

📁 references/

📄 AFFECTED.md

📄 SKILL.md