npm-to-pnpm
Fail
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install pnpm by downloading a standalone script from the official
get.pnpm.iodomain and piping it directly to the shell (sh) or PowerShell (iex). This matches the official, documented installation procedure for the tool. - [COMMAND_EXECUTION]: The migration workflows include commands to delete local files and directories (such as
package-lock.jsonandnode_modules) and execute various package manager commands for dependency installation and project configuration. - [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and project configuration templates from well-known service domains including
pnpm.io,npmjs.com, and GitHub. - [INDIRECT_PROMPT_INJECTION]: The skill involves the agent reading and processing existing project configuration files, which constitutes a potential attack surface if those files contain malicious instructions.
- Ingestion points: Project manifests (
package.json) and lockfiles are read from the local file system during migration guides. - Boundary markers: None explicitly defined in the documentation-heavy reference files.
- Capability inventory: The skill uses shell execution capabilities to perform installations, file deletions, and build operations.
- Sanitization: No specific content sanitization or validation logic is applied to the input project files beyond standard tool processing.
Recommendations
- HIGH: Downloads and executes remote code from: https://get.pnpm.io/install.sh - DO NOT USE without thorough review
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata