The Agent Skills Directory

[METADATA_POISONING]: The skill's YAML frontmatter in SKILL.md identifies the author as 'Anthony Fu' and references his GitHub repositories, whereas the actual author in the system context is 'cylixlee'. This discrepancy is misleading and may be used to leverage the reputation of another developer to gain user trust.
[SAFE]: External references and documentation links point to official pnpm resources (pnpm.io) and reputable GitHub organizations (pnpm, antfu).
[SAFE]: The skill demonstrates safe practices for managing credentials by using environment variable placeholders (${NPM_TOKEN}) in .npmrc configuration examples rather than hardcoding secrets.
[SAFE]: Documentation of advanced features, such as .pnpmfile.cjs hooks and overrides, describes standard and legitimate use cases for dependency management and security remediation.

pnpm