npm-security-best-practices
Expert guidance on securing npm packages, preventing supply chain attacks, and hardening package manager configurations
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-18 00:12
231,360 results
Expert guidance on securing npm packages, preventing supply chain attacks, and hardening package manager configurations
Biome - Fast all-in-one toolchain for web projects (linter + formatter in Rust, 100x faster than ESLint)
Skill for writing Storybook stories and CSF 3.0 best practices. Use in the following situations: (1) when creating a new story file (.stories.tsx, .stories.ts), (2) when modifying an existing story, (3) when configuring Args, Decorators, Parameters, (4)…
Develop and deploy Lakeflow Jobs on Databricks via DABs, Python SDK, or the CLI. Use when creating data engineering jobs with notebooks, Python wheels, SQL,…
Writes educational Teams channel posts about Claude Code features and best practices, using templates emphasizing concrete examples and underlying principles…
Guides developers and admins through direct interaction with the Fusion Help REST API — reading articles, FAQs, release notes, searching content, and managing…
Prepare and structurally review ISO 13485 QMS scope, controlled documentation, and local evidence manifests. Use for ISO 13485 certification-readiness…
Activation-aware weight quantization for 4-bit LLM compression with 3x speedup and minimal accuracy loss. Use when deploying large models (7B-70B) on limited…
OpenAI's model connecting vision and language. Enables zero-shot image classification, image-text matching, and cross-modal retrieval. Trained on 400M…
Framework for state-of-the-art sentence, text, and image embeddings. Provides 5000+ pre-trained models for semantic similarity, clustering, and retrieval.…
Apply Tesler's Law — every process has irreducible complexity that someone must absorb. Use when deciding whether the product or the user carries it. For…
Analyze escaped defects and test suite health through blameless postmortems. Covers bug pattern analysis, test suite health reviews, 5 Whys root cause…
Review an existing game codebase for architecture, performance, and best practices. Use when the user says "review my game", "code review", "check my game…
Presentation creation, editing, and analysis. When Claude needs to work with presentations (.pptx files) for: (1) Creating new presentations, (2) Modifying or…
Identify tax-loss harvesting opportunities across taxable accounts. Finds positions with unrealized losses, suggests replacement securities, and tracks wash…
A comprehensive starting point for AI agents to work with Capacitor. Covers core concepts, CLI, app creation, plugins, framework integration, best practices,…
Use when working with HealthKit, WorkoutKit, health data, workouts, or fitness features on iOS or watchOS. Covers permissions, queries, background delivery,…
Search the web for information. Use when you need to look something up, find current information, or research a topic.
Adds PyTorch FSDP2 (fully_shard) to training scripts with correct init, sharding, mixed precision/offload config, and distributed checkpointing. Use when…
Local drop-in API emulation for Vercel, GitHub, and Google services in CI and no-network sandboxes
Safely stage, commit, and push intended git changes with conventional commit messages. Use for ordinary non-release pushes when explicitly asked to push, save…
Guides founder-PM discovery, roadmaps, prioritization, and PMF measurement. Use when planning product strategy, metrics, or roadmaps.
Deprecated redirect skill that routes legacy 'content creator' requests to the correct specialist. Use when a user invokes 'content creator', asks to write a…
Responsive HTML email template generation using MJML 5.x framework. Use when the user asks to create, generate, design, or build an email template — including…