Install
$ agentstack add skill-hasna-skills-npmpublish ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
npm Publish
Publish npm packages to the npm registry with sensible defaults:
- Private by default - Sets
publishConfig.access: restricted - Patch bump by default - Increments version by 0.0.1
Usage
# Publish with defaults (private, patch bump)
npmpublish
# Specify bump type
npmpublish --bump minor # 0.1.0
npmpublish --bump major # 1.0.0
npmpublish --bump patch # 0.0.1 (default)
# Publish as public (use carefully!)
npmpublish --public
# Dry run (see what would happen)
npmpublish --dry-run
# Publish from a different directory
npmpublish --dir /path/to/package
Options
| Option | Description | Default | |--------|-------------|---------| | -b, --bump | Version bump: patch, minor, major | patch | | --public | Publish as public package | false (private) | | --dry-run | Preview without publishing | false | | -d, --dir | Package directory | current dir |
Requirements
NPM_TOKENin~/.secretsfor authentication- Valid
package.jsonin target directory
What It Does
- Reads
package.json - Ensures
publishConfig.access: restricted(unless --public) - Bumps version by specified amount (default: patch/0.0.1)
- Updates
package.json - Runs
bun publish - Confirms private access on npm registry
Examples
# Standard publish for internal package
npmpublish
# Release new feature version
npmpublish --bump minor
# Breaking change release
npmpublish --bump major
# Check what would be published
npmpublish --dry-run
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: hasna
- Source: hasna/skills
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.