pnpm
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing pnpm using a standalone shell script fetched from the well-known pnpm project domain. This involves piping a remote script directly to a shell, which is the official installation method provided by the vendor.
- Evidence:
curl -fsSL https://get.pnpm.io/install.sh | sh -inSKILL.mdandgetting-started.md. - [COMMAND_EXECUTION]: The documentation suggests a performance optimization for Windows environments that involves modifying Windows Defender exclusions. This requires the execution of system-level commands to exempt the package store directory from security scanning.
- Evidence:
Add-MpPreference -ExclusionPath $(pnpm store path)ingetting-started.md.
Audit Metadata