npm-docs

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of Markdown documentation files providing a reference for the npm CLI. No executable code or malicious scripts are included within the skill itself.
  • [COMMAND_EXECUTION]: The documentation describes the use of standard npm CLI commands such as npm install, npm run, and npx. These commands are the primary subject of the documentation and are presented in a neutral, educational context.
  • [PRIVILEGE_ESCALATION]: The troubleshooting documentation includes standard advice for resolving EACCES permission errors, such as using a version manager or applying sudo chown to the global node_modules directory. This is presented as a legitimate administrative solution to a common environment configuration issue.
  • [EXTERNAL_DOWNLOADS]: The documentation correctly identifies and references official and well-known services including the public npm registry (registry.npmjs.org), the npm website (npmjs.com), and various CI/CD platforms (GitHub Actions, GitLab CI, etc.). All references to external sources are informative and point to trusted or well-known entities.
  • [DATA_EXPOSURE]: Documentation regarding authentication and tokens (e.g., NPM_TOKEN) uses standard placeholders and environment variable references. No hardcoded credentials or sensitive data are present in the files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 01:43 PM
Security Audit — agent-trust-hub — npm-docs