npm-library-setup

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely educational and template-driven, providing standard boilerplate for npm library development. It focuses on modern standards such as ES Modules (ESM) and the exports field in package.json.
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known tools and resources:
  • Recommends using bunchee for bundling, which is an open-source tool maintained by the skill's author (huozhi).
  • Recommends vitest for testing, which is a widely-used and established testing framework.
  • References official documentation from the Node.js project for release schedules.
  • [COMMAND_EXECUTION]: The skill provides standard development commands (npm install, npm run build, npm test). These are typical for project initialization and development workflows and do not involve suspicious or obfuscated parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 01:03 AM
Security Audit — agent-trust-hub — npm-library-setup