Repository
bodadotsh/npm-security-best-practices agent skills
- skill
- 1
- GitHub stars
- 858
GitHub description: “[Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks”
- Stars
- 858 (19 forks)
- Licence
- MIT
- Last push
- Sep 2026
- Created
- Sep 2025
- deno
- javascript
- list
- nodejs
- npm
- pnpm
- security
- yarn
- awesome
Install all skills
npx skills add bodadotsh/npm-security-best-practicesAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in bodadotsh/npm-security-best-practices, ranked
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Applies safer package manager defaults and dependency vetting to JavaScript and TypeScript projects to reduce supply-chain attack risk. | bodadotsh/ | 858 | — | ~1k | Automated safety check: Warn | MIT | 9 days ago |
Questions, answered from the data.
What is the best skill in bodadotsh/npm-security-best-practices?
npm Supply Chain Security from bodadotsh/npm-security-best-practices ranks first of the 1 skills in bodadotsh/npm-security-best-practices listed here, with the highest score: its repository has 858 GitHub stars, its SKILL.md loads about 1k tokens and it has a warning in the automated safety check worth reviewing.
Are the skills in bodadotsh/npm-security-best-practices official?
None yet. All 1 skills in bodadotsh/npm-security-best-practices listed here come from community repositories; a skill counts as official when the product's own GitHub organization publishes it.
How do I install all skills from bodadotsh/npm-security-best-practices?
Run npx skills add bodadotsh/npm-security-best-practices in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.