GitHub Packages (npm) AI Skill Guide

Overview & Engine Architecture

GitHub Packages hosts npm packages under https://npm.pkg.github.com tied to a GitHub user or organization. Publish with publishConfig and a scoped name (@org/pkg); authenticate with GITHUB_TOKEN in Actions or a PAT with read:packages/write:packages locally. Agents configure .npmrc correctly, avoid leaking tokens, and align package permissions with repo visibility.

package.json (name @org/pkg)
   -> npm publish
       -> npm.pkg.github.com
Consumers -> .npmrc (@org:registry=...) + token

When to use this skill

• Publishing private or internal npm libraries to GitHub Packages
• Consuming @org/* packages in apps and Actions
• Migrating from npmjs private registries
• Debugging 401/403 publish or install failures