The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses local shell commands including grep, jq, and find to inspect project configuration files such as package.json, .npmrc, .yarnrc.yml, and pnpm-workspace.yaml. These operations are performed in a read-only manner to audit security settings.
[COMMAND_EXECUTION]: The skill invokes npm, yarn, and pnpm with the --version flag to verify that the toolchain meets the minimum version requirements for supply-chain security features.
[SAFE]: The documentation references official Grafana GitHub repositories and standard Yarn documentation as trusted sources for dependency allow-lists and protocol information. These references are consistent with the skill's authorship and provide legitimate security context.

check-npm