pnpm
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected. The skill consists of legitimate technical documentation for the pnpm tool.
- [EXTERNAL_DOWNLOADS]: References the official npm registry and trusted GitHub Actions (pnpm/action-setup, actions/setup-node) for CI/CD integration workflows.
- [COMMAND_EXECUTION]: Provides guidance on standard pnpm commands for installing dependencies, managing workspaces, and executing local scripts.
- [REMOTE_CODE_EXECUTION]: Documents the standard use of
pnpm dlx, which is a legitimate utility for running packages from the registry without permanent installation.
Audit Metadata