Install
$ agentstack add skill-pledgeandgrow-pledge-skills-npm ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
npm Documentation
Quick Reference
| Topic | File | Description | |-------|------|-------------| | About npm | about-npm.md | npm overview, registry, packages, modules, scopes, public/private packages | | Getting Started | getting-started.md | User accounts, 2FA, profile, billing, local env setup, installing Node.js & npm | | package.json | package-json.md | package.json fields, dependencies, semver, README, Node.js modules | | Publishing | publishing.md | Creating & publishing unscoped/scoped/private/org packages, dist-tags | | Managing Packages | managing-packages.md | Updating, deprecating, transferring, unpublishing, visibility, collaborators | | Installing Packages | installing-packages.md | Searching, downloading locally/globally, updating, uninstalling, EACCES | | Security | security.md | Audit, provenance, OIDC, staged publishing, signatures, 2FA, malware | | Integrations | integrations.md | External services, access tokens, CI/CD, Docker | | Organizations | organizations.md | Creating/managing orgs, billing, members, teams, org packages | | CLI Commands | cli-commands.md | All npm CLI commands reference (v12) | | Configuring npm | configuring-npm.md | .npmrc, package.json, package-lock.json, folders, install | | Using npm | using-npm.md | Registry, package spec, config, logging, scope, scripts, workspaces | | Troubleshooting | troubleshooting.md | Common errors, debug logs, version issues | | Policies | policies.md | Terms, conduct, disputes, license, privacy, unpublish, DMCA, security |
Core Concepts
- npm — Node Package Manager; package registry, CLI, and website
- Package — A file/directory described by
package.json - Module — Any file/directory in
node_modulesloadable viarequire()orimport - Scope — A namespace for packages (e.g.,
@myorg/mypackage) - Semantic Versioning —
MAJOR.MINOR.PATCHversioning scheme - Registry — The public npm registry at
https://registry.npmjs.org - Organization — A group for coordinating package maintenance and collaboration
- Access Token — Authentication token for CLI/API access
- Workspaces — Monorepo support for managing multiple packages
Quick Start
# Install a package
npm install
# Install globally
npm install -g
# Initialize a new project
npm init
# Run a script
npm run
# Publish a package
npm publish
# Update packages
npm update
# Audit for vulnerabilities
npm audit
Architecture Overview
npm Ecosystem
├── Registry (registry.npmjs.org)
│ ├── Public packages (free)
│ └── Private packages (paid)
├── CLI (npm command)
│ ├── Commands (install, publish, audit, etc.)
│ ├── Config (.npmrc)
│ └── Scripts (package.json scripts)
├── Website (npmjs.com)
│ ├── User accounts
│ ├── Organizations
│ └── Package pages
└── Integrations
├── CI/CD workflows
├── Docker
└── Access tokens
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: pledgeandgrow
- Source: pledgeandgrow/pledge-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.