npm-security-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely educational and provides legitimate security guidance for Node.js developers.
- [EXTERNAL_DOWNLOADS]: References official and well-known security tools and documentation, including Snyk, Socket.dev, GitHub, and Microsoft. These are used for legitimate configuration and auditing purposes.
- [COMMAND_EXECUTION]: Provides standard shell commands and configuration examples for package managers (npm, pnpm, Bun) and security CLIs as documentation for the user. These commands are intended for manual execution to harden developer environments.
- [NO_CODE]: The skill does not contain executable scripts that run automatically. It provides JavaScript and shell snippets for educational purposes to demonstrate how to assess package health and secure environments.
Audit Metadata