.agents/skills/npm-git-install/SKILL.md
Install npm packages directly from GitHub repositories using git URLs. Use when installing packages from private repos, specific branches, or unreleased versions not yet on npm registry.
npx skillsauth add Reinasboo/Bountylab npm-git-installInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Covers how to install npm packages directly from GitHub repositories. Useful for installing packages not in the npm registry, specific branches, or private repositories.
npm install git+https://github.com/<owner>/<repo>.git#<branch|tag|commit>
# Specific branch
npm install -g git+https://github.com/JEO-tech-ai/supercode.git#main
# Specific tag
npm install git+https://github.com/owner/repo.git#v1.0.0
# Specific commit
npm install git+https://github.com/owner/repo.git#abc1234
# Default branch (omit #)
npm install git+https://github.com/owner/repo.git
npm install -g git+ssh://[email protected]:JEO-tech-ai/supercode.git#main
npm install -g git+https://github.com/JEO-tech-ai/supercode.git#main --verbose
What npm performs when installing from a Git URL:
1. Git Clone
└─ Clone repository at specified branch (#main)
↓
2. Install Dependencies
└─ Install dependencies in package.json
↓
3. Run Prepare Script
└─ Run "prepare" script (TypeScript compile, build, etc.)
↓
4. Register Global Binary
└─ Link executable from bin field to global path
# What npm does internally
git clone https://github.com/owner/repo.git /tmp/npm-xxx
cd /tmp/npm-xxx
git checkout main
npm install
npm run prepare # Run if exists
cp -r . /usr/local/lib/node_modules/repo/
ln -s ../lib/node_modules/repo/bin/cli.js /usr/local/bin/repo
# Check global npm path
npm root -g
# macOS/Linux: /usr/local/lib/node_modules
# Windows: C:\Users\<username>\AppData\Roaming\npm\node_modules
# Check installed package
npm list -g <package-name>
# Check binary location
which <command>
# or
npm bin -g
| Platform | Package Location | Binary Location |
|----------|-----------------|----------------|
| macOS/Linux | /usr/local/lib/node_modules/ | /usr/local/bin/ |
| Windows | %AppData%\npm\node_modules\ | %AppData%\npm\ |
| nvm (macOS) | ~/.nvm/versions/node/vX.X.X/lib/node_modules/ | ~/.nvm/versions/node/vX.X.X/bin/ |
{
"dependencies": {
"supercode": "git+https://github.com/JEO-tech-ai/supercode.git#main",
"my-package": "git+ssh://[email protected]:owner/repo.git#v1.0.0",
"another-pkg": "github:owner/repo#branch"
}
}
{
"dependencies": {
"pkg1": "github:owner/repo",
"pkg2": "github:owner/repo#branch",
"pkg3": "github:owner/repo#v1.0.0",
"pkg4": "github:owner/repo#commit-sha"
}
}
# 1. Generate SSH key
ssh-keygen -t ed25519 -C "[email protected]"
# 2. Register public key on GitHub
cat ~/.ssh/id_ed25519.pub
# GitHub → Settings → SSH Keys → New SSH Key
# 3. Install via SSH method
npm install git+ssh://[email protected]:owner/private-repo.git
# 1. Create PAT on GitHub
# GitHub → Settings → Developer settings → Personal access tokens
# 2. Install with token in URL
npm install git+https://<token>@github.com/owner/private-repo.git
# 3. Use environment variable (recommended for security)
export GITHUB_TOKEN=ghp_xxxxxxxxxxxx
npm install git+https://${GITHUB_TOKEN}@github.com/owner/private-repo.git
# ~/.npmrc
//github.com/:_authToken=${GITHUB_TOKEN}
# Method 1: Change ownership
sudo chown -R $(whoami) /usr/local/lib/node_modules
# Method 2: Change npm directory (recommended)
mkdir ~/.npm-global
npm config set prefix '~/.npm-global'
echo 'export PATH=~/.npm-global/bin:$PATH' >> ~/.bashrc
source ~/.bashrc
# macOS
brew install git
# Ubuntu/Debian
sudo apt-get install git
# Windows
# https://git-scm.com/download/win
# Test SSH connection
ssh -T [email protected]
# Cache credentials
git config --global credential.helper store
# or macOS
git config --global credential.helper osxkeychain
# For TypeScript projects
npm install -g typescript
# Verbose log on build failure
npm install git+https://... --verbose 2>&1 | tee npm-install.log
# Clear npm cache
npm cache clean --force
# Reinstall
npm uninstall -g <package>
npm install -g git+https://...
# Update to latest version (reinstall)
npm uninstall -g <package>
npm install -g git+https://github.com/owner/repo.git#main
# Update package.json dependency
npm update <package>
# Check installed version
npm list -g <package>
# Check remote latest commit
git ls-remote https://github.com/owner/repo.git HEAD
npm uninstall -g <package>
# Global install
npm install -g git+https://github.com/JEO-tech-ai/supercode.git#main
# Verify installation
supercode --version
// .supercoderc or supercode.config.json
{
"aiRules": {
"enabled": true,
"techStack": ["TypeScript", "React", "Node.js"]
},
"smartActions": [
{
"name": "Generate Documentation",
"icon": "docs",
"prompt": "Generate comprehensive documentation"
}
],
"architectureMode": {
"enabled": true,
"detailLevel": "detailed"
}
}
#v1.0.0 format#main in production#npm #git #github #install #package-management #node
development
Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS, authentication, authorization, cryptography issues. Provides systematic review with confidence-based reporting.
development
Implement security best practices for web applications and infrastructure. Use when securing APIs, preventing common vulnerabilities, or implementing security policies. Handles HTTPS, CORS, XSS, SQL Injection, CSRF, rate limiting, and OWASP Top 10.
development
Create responsive web designs that work across all devices and screen sizes. Use when building mobile-first layouts, implementing breakpoints, or optimizing for different viewports. Handles CSS Grid, Flexbox, media queries, viewport units, and responsive images.
content-media
Produce programmable videos with Remotion using scene planning, asset orchestration, and validation gates for automated, brand-consistent video content.