OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
This skill is a professional documentation resource for the pnpm package manager. It promotes security best practices, such as dependency auditing and the use of the `--ignore-scripts` flag. The 'low' verdict is assigned due to the inherent attack surface associated with processing project manifest files and the use of local lifecycle hooks.
Detected behaviors
No alerts
No issues
5/5 files flagged
Score: 93/100 · 2 sections analyzed