pnpm
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the pnpm installation script from its official domain get.pnpm.io, which is a standard and safe practice for this well-known tool.
- [REMOTE_CODE_EXECUTION]: Includes a command to pipe a remote script from the official pnpm distribution point to a shell (curl | sh), which is a standard installation method for the package manager.
- [COMMAND_EXECUTION]: Contains numerous examples of shell commands for managing Node.js packages and workspaces using pnpm, which are provided for educational purposes within the skill context.
Audit Metadata