Best agent skills for npm
We found 81 agent skills for npm in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. npm, dsh-npm and registry-default-mirror lead it. squad-version-check and list-npm-package-content are published by the company that makes them. detecting-dependency-confusion comes from the largest repository here (34,941 stars). 13 of the 15 had activity in the last 30 days. Each entry lists why it made the list and links to its install page.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
Top 15 of 81
- 1npm
steipete
npm registry ops: login, whoami, names, publish; 1Password tmux.
- Repository has 7.4K stars
- Active in the last 30 days
- Open source (MIT)
★ 7.4KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 2dsh-npm
Rimagination
Package an MCP server or agent plugin as a DeepSeek Harness (DSH) Cordis bundle and publish it to registry.npmjs.org so DSH's Plugins → Add plugin installs it…
- Repository has 1.2K stars
- Active in the last 30 days
- Open source (MIT)
★ 1.2KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 3registry-default-mirror
cisco-ai-defense
Pin the npm registry to the public default and fetch published release notes
- Repository has 2.6K stars
- Active in the last 30 days
- Open source (Apache-2.0)
★ 2.6KLast active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 4publish-config
trezor
publishConfig rules for public npm packages in the Trezor Suite monorepo.
- Repository has 1.1K stars
- Active in the last 30 days
★ 1.1KLast active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 5cyrus-setup-prerequisites
cyrusagents
Check and install prerequisites for Cyrus — Node.js, jq, gh CLI, and the cyrus-ai npm package.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 867Last active Sep 30, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 6autoship
mblode
Runs a changesets npm release through the version PR, CI publish, and registry verification.
- Active in the last 30 days
- Open source (MIT)
★ 162Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 7scaffold-cli
mblode
Scaffolds a TypeScript CLI and npm package with the house toolchain, dual tsdown outputs, CLI contracts, changesets, and publishing templates.
- Active in the last 30 days
- Open source (MIT)
★ 162Last active Oct 3, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 8squad-version-check
microsoftOfficial
Internals of how @bradygaster/squad-cli stamps its version, how `squad upgrade` works (what it preserves vs overwrites), and how to probe the npm registry for…
- Published by the vendor
- Repository has 1.4K stars
- Active in the last 30 days
★ 1.4KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 9bundle
finom
Vovk.ts `vovk bundle` CLI — packages composed TypeScript client as zero-dep publishable npm package.
- Active in the last 30 days
- Open source (MIT)
★ 54Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 10code-vuln-audit
zebbern
Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…
- Repository has 4.7K stars
- Open source (MIT)
- Ships helper scripts
★ 4.7KLast active May 31, 2026Claude Code, Claude apps, Codex, Cursor +6
CFreshness: C–Security: not graded yet - 11deps-doctor
jongio
Audit, update, and secure project dependencies across npm, pnpm, Yarn, pip, Pipenv, Poetry, uv, Go, Cargo, Bundler, Composer, NuGet, Maven, Gradle, Swift…
- Active in the last 30 days
- Open source (MIT)
- Ships helper scripts
★ 18Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 12list-npm-package-content
vercelOfficial
List the contents of an npm package tarball before publishing.
- Published by the vendor
- Repository has 27.5K stars
- Active in the last 30 days
★ 27.5KLast active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 13cli-ts
vanducng
Build and maintain production TypeScript CLIs as stable public APIs - command contracts, packed-artifact correctness, npm publishing, CI/CD, docs, providers…
- Active in the last 30 days
- Open source (MIT)
★ 8Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 14automate-npm-release
jd-solanki
Automate npm package publishing via GitHub Actions for single-package repos and independent monorepo packages, including bumpp version tags, GitHub release…
- Active in the last 30 days
★ 7Last active Oct 4, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 15detecting-dependency-confusion
mukul975
Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumerating claimable internal package names…
- Largest repository here (34,941 stars)
- Open source (Apache-2.0)
- Ships helper scripts
★ 34.9KLast active Aug 2, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet