espennilsen/npm
skills/npm/SKILL.md
Manage npm packages — install, publish, version bump, audit, and run scripts using the npm tool.
$ install --global
skillsauthnpx skillsauth add espennilsen/pi npmInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 9:03 PM1.8s1 file scanned
SKILL.md
- name:
- npm
- description:
- Manage npm packages — install, publish, version bump, audit, and run scripts using the npm tool.
NPM Skill
Use the npm tool to manage Node.js packages and run npm workflows.
Common workflows
Install dependencies
npm tool: action=install
npm tool: action=install, args="express @types/express --save-dev"
Run scripts
npm tool: action=run, args="dev"
npm tool: action=test
npm tool: action=build
Publish a package
Always do a dry run first to verify what will be published:
npm tool: action=publish, dry_run=true
Then publish for real:
npm tool: action=publish
npm tool: action=publish, args="--tag beta"
Version bumps
Preview first, then apply:
npm tool: action=version, args="patch", dry_run=true
npm tool: action=version, args="minor"
Check for issues
npm tool: action=outdated
npm tool: action=audit
npm tool: action=audit, args="--fix"
Inspect packages
npm tool: action=info, args="react"
npm tool: action=list, args="--depth=0"
Guidelines
- Before publishing, always read
package.jsonto verify name, version, files, and registry config. - Use
dry_run: truefor publish, pack, and version to preview before committing. - Check
npm outdatedbefore updating to understand what will change. - Run
npm auditafter installing new dependencies. - When working in a monorepo, use the
pathparameter to target specific packages.
Related Skills
espennilsen/extensions/pi-a2a
tools
VerifiedTrustedCommunity
# pi-a2a Long-Running Tasks Skill ## Overview The pi-a2a extension supports **long-running tasks** that can execute for hours or days without timeouts. This is essential for: - Data processing pipelines - Batch operations - Research and aggregation tasks - External API jobs with unpredictable duration - Any A2A task that exceeds the standard timeout ## When to Use **Use long-running tasks when:** - Task execution time is unpredictable or known to exceed 10 minutes - The remote agent is proc
102SKILL.mdUpdated Apr 17, 2026
espennilsen/cmux
development
VerifiedTrustedCommunity
Orchestrate cmux terminal panes — split terminals, run parallel processes, read output from other panes, and use the built-in browser. Use when working inside cmux and you need to run a dev server, watch tests, spawn sub-agents, or preview web pages.
98SKILL.mdUpdated Apr 17, 2026
espennilsen/ui-review
testing
VerifiedTrustedCommunity
Review UI designs and implementations for accessibility, consistency, usability, and visual quality. Use when asked to review a design, audit accessibility, check UI consistency, compare implementation against mockups, or evaluate a user interface.
96SKILL.mdUpdated Apr 23, 2026
espennilsen/skill-creator
tools
VerifiedTrustedCommunity
Create, review, and improve skills for Pi agents. A skill is a folder with a SKILL.md that teaches an agent specialized workflows, domain knowledge, or tool integrations. Use when asked to create a new skill, improve an existing skill, review a skill for quality, scaffold a skill from a workflow, or convert documentation into a skill. Also triggers on "make a skill for", "build a skill", "skill for [topic]", "teach the agent to", or "package this workflow as a skill".
96SKILL.mdUpdated Apr 23, 2026