skills/mindrally/skills/pnpm/Gen Agent Trust Hub

pnpm

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation, configuration examples, and best practices for the pnpm package manager. All commands and configuration settings (e.g., pnpm-workspace.yaml, .npmrc) are consistent with official documentation and industry standards for JavaScript/TypeScript development.
  • [SAFE]: The skill encourages security-positive behaviors, such as using pnpm audit to check for vulnerabilities, leveraging pnpm's strict dependency isolation to prevent phantom dependencies, and pinning transitive dependencies via overrides to fix known security issues.
  • [SAFE]: Examples involving external packages (lodash, typescript) and internal workspace protocols are illustrative and do not involve downloading or executing code from untrusted or unknown sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:39 AM
Security Audit — agent-trust-hub — pnpm