Skip to content
Agentmart
Submit a tool

Best agent skills for npm

We found 81 agent skills for npm in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. npm, dsh-npm and registry-default-mirror lead it. squad-version-check and list-npm-package-content are published by the company that makes them. detecting-dependency-confusion comes from the largest repository here (34,941 stars). 13 of the 15 had activity in the last 30 days. Each entry lists why it made the list and links to its install page.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

Top 15 of 81

  1. 1
    npm

    steipete

    npm registry ops: login, whoami, names, publish; 1Password tmux.

    • Repository has 7.4K stars
    • Active in the last 30 days
    • Open source (MIT)

    ★ 7.4KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  2. 2
    dsh-npm

    Rimagination

    Package an MCP server or agent plugin as a DeepSeek Harness (DSH) Cordis bundle and publish it to registry.npmjs.org so DSH's Plugins → Add plugin installs it…

    • Repository has 1.2K stars
    • Active in the last 30 days
    • Open source (MIT)

    ★ 1.2KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  3. 3
    registry-default-mirror

    cisco-ai-defense

    Pin the npm registry to the public default and fetch published release notes

    • Repository has 2.6K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 2.6KLast active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6

  4. 4

    publishConfig rules for public npm packages in the Trezor Suite monorepo.

    • Repository has 1.1K stars
    • Active in the last 30 days

    ★ 1.1KLast active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6

  5. 5

    Check and install prerequisites for Cyrus — Node.js, jq, gh CLI, and the cyrus-ai npm package.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 867Last active Sep 30, 2026Claude Code, Claude apps, Codex, Cursor +6

  6. 6
    autoship

    mblode

    Runs a changesets npm release through the version PR, CI publish, and registry verification.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 162Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  7. 7

    Scaffolds a TypeScript CLI and npm package with the house toolchain, dual tsdown outputs, CLI contracts, changesets, and publishing templates.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 162Last active Oct 3, 2026Claude Code, Claude apps, Codex, Cursor +6

  8. 8
    squad-version-check

    microsoftOfficial

    Internals of how @bradygaster/squad-cli stamps its version, how `squad upgrade` works (what it preserves vs overwrites), and how to probe the npm registry for…

    • Published by the vendor
    • Repository has 1.4K stars
    • Active in the last 30 days

    ★ 1.4KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6

  9. 9
    bundle

    finom

    Vovk.ts `vovk bundle` CLI — packages composed TypeScript client as zero-dep publishable npm package.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 54Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  10. 10

    Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

    • Repository has 4.7K stars
    • Open source (MIT)
    • Ships helper scripts

    ★ 4.7KLast active May 31, 2026Claude Code, Claude apps, Codex, Cursor +6

  11. 11

    Audit, update, and secure project dependencies across npm, pnpm, Yarn, pip, Pipenv, Poetry, uv, Go, Cargo, Bundler, Composer, NuGet, Maven, Gradle, Swift…

    • Active in the last 30 days
    • Open source (MIT)
    • Ships helper scripts

    ★ 18Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  12. 12

    List the contents of an npm package tarball before publishing.

    • Published by the vendor
    • Repository has 27.5K stars
    • Active in the last 30 days

    ★ 27.5KLast active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  13. 13
    cli-ts

    vanducng

    Build and maintain production TypeScript CLIs as stable public APIs - command contracts, packed-artifact correctness, npm publishing, CI/CD, docs, providers…

    • Active in the last 30 days
    • Open source (MIT)

    ★ 8Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  14. 14

    Automate npm package publishing via GitHub Actions for single-package repos and independent monorepo packages, including bumpp version tags, GitHub release…

    • Active in the last 30 days

    ★ 7Last active Oct 4, 2026Claude Code, Claude apps, Codex, Cursor +6

  15. 15

    Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumerating claimable internal package names…

    • Largest repository here (34,941 stars)
    • Open source (Apache-2.0)
    • Ships helper scripts

    ★ 34.9KLast active Aug 2, 2026Claude Code, Claude apps, Codex, Cursor +6