npm-docs
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown documentation files providing a reference for the npm CLI. No executable code or malicious scripts are included within the skill itself.
- [COMMAND_EXECUTION]: The documentation describes the use of standard npm CLI commands such as
npm install,npm run, andnpx. These commands are the primary subject of the documentation and are presented in a neutral, educational context. - [PRIVILEGE_ESCALATION]: The troubleshooting documentation includes standard advice for resolving
EACCESpermission errors, such as using a version manager or applyingsudo chownto the globalnode_modulesdirectory. This is presented as a legitimate administrative solution to a common environment configuration issue. - [EXTERNAL_DOWNLOADS]: The documentation correctly identifies and references official and well-known services including the public npm registry (
registry.npmjs.org), the npm website (npmjs.com), and various CI/CD platforms (GitHub Actions, GitLab CI, etc.). All references to external sources are informative and point to trusted or well-known entities. - [DATA_EXPOSURE]: Documentation regarding authentication and tokens (e.g.,
NPM_TOKEN) uses standard placeholders and environment variable references. No hardcoded credentials or sensitive data are present in the files.
Audit Metadata