The Agent Skills Directory

[SAFE]: The skill serves as a documentation guide for npm best practices. It includes specific security recommendations such as using npm audit to check for vulnerabilities, using npm publish --provenance for cryptographic build transparency, and avoiding the execution of untrusted scripts during installation.
[SAFE]: All referenced Node.js packages in examples (e.g., lodash, jest, glob, semver) are well-known, legitimate libraries commonly used in the ecosystem.
[SAFE]: The troubleshooting section correctly identifies permission issues and suggests standard, non-privileged solutions (configuring a user npm prefix) instead of recommending dangerous practices like using sudo.

npm