Skills turborepo

📦

turborepo

Name: turborepo
Author: antfu

v2.9.19-canary.9 Content revision r2 Safe 🌐 Network access📁 Filesystem access🔑 Env variables⚙️ External commands

Optimize Turborepo Monorepos

Complex task graphs and cache settings can make monorepos slow or unreliable. This skill provides focused Turborepo configuration, debugging, and CI guidance.

Supports: Claude Codex Code(CC)

📊 74 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "turborepo" from https://skillstore.io/skills/antfu-turborepo.md and its manifest at https://skillstore.io/api/skills/antfu-turborepo/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/antfu-turborepo.md Signed manifest GET /api/skills/antfu-turborepo/manifest Signed lockfile GET /api/skills/antfu-turborepo/lockfile

Test it

Using "turborepo". Review why my build task never restores cached files.

Expected outcome:

The review identifies missing build outputs, explains cache restoration, and lists configuration changes by package.

Using "turborepo". Make continuous integration run only work affected by this branch.

Expected outcome:

The response recommends affected-package execution, explains the comparison base, and preserves dependent package coverage.

Using "turborepo". Separate shared environment settings from package-specific settings.

Expected outcome:

The response classifies variables by scope, limits credential passthrough, and recommends package-level cache inputs.

Security Audit

Safe

v5 • 7/23/2026 Open versioned report

All 356 static findings are false positives caused by Markdown examples, configuration names, placeholder URLs, and explanatory snippets. The documentation contains no executable scripts, secret collection, data exfiltration, or prompt injection. Normal use may run Turborepo commands, edit repository configuration, and connect to remote caching services at the user's direction.

Files scanned

5,632

Lines analyzed

Review items

False positives ignored

Risk Factors

🌐 Network access (11)

references/best-practices/dependencies.md:72 references/best-practices/structure.md:98 references/best-practices/structure.md:120 references/caching/remote-cache.md:97 references/configuration/RULE.md:76 references/configuration/RULE.md:100 references/environment/gotchas.md:115 references/environment/gotchas.md:149 references/environment/RULE.md:110 SKILL.md:743 SKILL.md:951

📁 Filesystem access (32)

🔑 Env variables (45)

⚙️ External commands (50)

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/antfu-turborepo/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/antfu-turborepo/security.svg)](https://skillstore.io/skills/antfu-turborepo?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/antfu-turborepo?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/antfu-turborepo/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/antfu-turborepo.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

antfu. (2026). turborepo security audit report (audit version 5) [Author version 2.9.19-canary.9]. Skillstore. https://skillstore.io/skills/antfu-turborepo/audits/5

BibTeX citation

@techreport{antfu-antfu-turborepo-2026,
  author = {antfu},
  title = {turborepo security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/antfu-turborepo/audits/5},
  note = {Author version 2.9.19-canary.9}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "turborepo security audit report (audit version 5)"
version: "2.9.19-canary.9"
type: report
authors:
  - name: "antfu"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/antfu-turborepo/audits/5"
identifiers:
  - type: other
    value: "skillstore:antfu-turborepo:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

vercel Recommended

vercel-turborepo

Skillstore Score 75

Evidence Confidence High

Skillstore usage 12

Updated

2026-08-21

antfu Current

antfu-turborepo

Skillstore Score 74

Evidence Confidence High

Skillstore usage 6

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Configure a New Monorepo

Define package tasks, dependencies, outputs, and cache inputs for a new Turborepo workspace.

Diagnose Cache Behavior

Find missing outputs, undeclared environment inputs, and broad dependencies that cause incorrect or inefficient caching.

Optimize Continuous Integration

Run affected packages, configure remote caching, and reduce unnecessary work across continuous integration jobs.

Try These Prompts

Review Basic Configuration

Review my turbo.json and package scripts. Identify missing task dependencies, outputs, and cache settings. Explain each recommended change.

Debug Cache Misses

Analyze these task logs and configuration. Explain why cache misses occur. Check file inputs, environment variables, outputs, and dependency relationships.

Improve CI Performance

Review this CI workflow for a Turborepo repository. Add affected-package execution and remote caching guidance. Preserve required deployment and test dependencies.

Redesign an Advanced Task Graph

Redesign this task graph for parallel execution and correct invalidation. Evaluate package configurations, transit tasks, watch mode, environment scope, and architectural boundaries.

Best Practices

Provide turbo.json, root package.json, and relevant package scripts for accurate advice.
State the package manager, Turborepo version, CI provider, and expected task outputs.
Review environment passthrough and remote cache settings before applying generated changes.

Avoid

Do not place package task logic in root scripts when package-level scripts can own it.
Do not include secret values in prompts. Provide variable names only.
Do not use broad cache inputs or loose environment mode without documenting the tradeoff.