Home / Skills / secure-npm-package
secure-npm-package
evilmartians/agent-skillsSkill
Set up a secure release process for an npm package to protect it from supply chain attacks. Use for any request to create and publish a new npm package, secure npm publishing or releasing, set up npm Trusted Publishing, provenance, or Staged Publishing, harden a release workflow.
Why this score
This repo hosts 6 skills, so its 49 stars are split between them (about 8 each) for scoring.
Popularity score: 58/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit b35b6cdbb21e, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onesecure-npm-package evilmartians/agent-skills · Skill | 58 | ★ 49 | ≈75 always | 21d ago |
| list-npm-package-content vercel/ai · Skill Both about npm and package | 76 | ★ 27k | ≈54 always | 16d ago |
| npm-security bodadotsh/npm-security-best-practices · Skill Both about npm and package | 72 | ★ 859 | ≈57 always | 1mo ago |
| npm-release luochang212/skill-zoo · Skill Both about npm and release | 63 | ★ 120 | ≈89 always | 18d ago |
| publish-placeholder-package remix-run/remix · Skill Both about package and npm | 85 | ★ 33k | ≈62 always | 16d ago |
| ci-secure starslingdev/skills · Skill Both about secure | 57 | ★ 40 | ≈19 always | 16d ago |