The Agent Skills Directory

[SAFE]: The skill provides documentation and reference material for using pnpm. All instructions and examples follow standard development practices for the tool.
[SAFE]: The reference files include detailed guides on supply-chain security features (e.g., allowBuilds for script approval, minimumReleaseAge to prevent malware ingestion, and trustPolicy), which are intended to improve the security posture of projects using the skill.
[SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found. The skill correctly instructs users to gitignore sensitive authentication files like .npmrc.
[SAFE]: Examples involving dynamic execution (such as .pnpmfile.mjs hooks) are documented as optional extension points for users to customize their local environment, not as hidden or malicious payloads.

pnpm