skills/hairyf/skills/pnpm/Gen Agent Trust Hub

pnpm

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation in references/core-installation.md includes instructions to download the official pnpm installer from https://get.pnpm.io/install.sh and https://get.pnpm.io/install.ps1. These are the standard, official endpoints for the pnpm project.\n- [REMOTE_CODE_EXECUTION]: The installation guide provides commands that pipe the downloaded installer script directly into a shell interpreter (e.g., | sh or | Invoke-Expression). This is the standard installation pattern for pnpm and is documented here for the agent's context when setting up environments.\n- [DYNAMIC_EXECUTION]: The skill describes the use of .pnpmfile.cjs in references/features-hooks.md, which is a built-in pnpm feature that allows users to write JavaScript logic to programmatically modify the dependency tree during resolution. This is a powerful, standard developer feature for fixing broken packages or enforcing version constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:05 PM