claude

secure-npm-package

Set up a secure npm package release process — Trusted Publishing with staged publishes from GitHub Actions — and walk the user through the required npmjs.com and GitHub settings

64 on GitHubMITupdated 6 days agosecurity
/

Plugin secure-npm-package from marketplace evilmartians in evilmartians/agent-skills. Commands read from the repo's manifest — 6 days ago.

What it installs

Skills (6)

  • good-readme

    Write or improve a README.md for an open source project. Use this for any request to create, generate, rewrite, review, or polish a README, GitHub repo page, project description, or "getting started" docs for a library, framework, CLI, or tool, or to make an open source project more popular or attra

  • llms-visibility

    Make websites, docs, blogs, or landing pages agent-friendly: visible and readable to LLMs and AI agents like ChatGPT, Perplexity, Claude Code, and Cursor. Use for requests involving llms.txt, llms-full.txt, serving .md/Markdown versions of pages, Accept text/markdown content negotiation, Link rel="a

  • secure-npm-package

    Set up a secure release process for an npm package to protect it from supply chain attacks, stolen npm tokens, and npm worms. Use for any request to create and publish a new npm package, secure npm publishing or releasing, set up npm Trusted Publishing (OIDC, no NPM_TOKEN), provenance, or Staged Pub

  • skills-visibility

    Publish a catalog of agent skills (Claude Code, Codex, Cursor, and other SKILL.md skills) and make it discoverable to AI coding agents and their installers — the way evilmartians.com/agent-skills does. Use this whenever the user wants to publish, distribute, or share agent skills; make their skills

  • tailwind-best-practices

    Write Tailwind CSS following practices that keep a fast-to-write codebase maintainable — use design tokens instead of magic values, keep class lists short, group tokens semantically, generate classes in consistent order, avoid @apply for extracting repeated styles, and use fixed variants instead of

  • web-video

    Encode a video for the web with a bundled ffmpeg script: AV1 and H.264 MP4s plus a JPEG poster for ordinary video, with HEVC on request, or VP9 WebM and HEVC with alpha plus a PNG poster for transparent video, picked from the source automatically. Use when the user wants to optimize, compress, or co

View source on GitHub evilmartians.com

More from evilmartians/agent-skills

All 6 plugins →

Write or improve a README.md for an open source project based on Evil Martians real experience of successfully promoting PostCSS, Nano ID, and other real popular projects

6 skills

64

Make a site agent-friendly: visible and readable to LLMs and AI agents. Covers Markdown routes, Accept content negotiation, llms.txt, and crawler signals in robots.txt. Pushes back on popular patterns that don't work.

6 skills

64

Publish a catalog of agent skills and make it discoverable and installable by AI coding agents — a .well-known discovery index, self-hosted archives with integrity digests, and multiple install commands (npx skills, gh skill, Claude plugin marketplace, curl)

6 skills

64

Write and audit Tailwind CSS with practices that keep a fast-to-write codebase maintainable — design tokens, grouped tokens, consistent class ordering, and fixed variants for design-system components

6 skills

64

web-video

claude

Encode a video for the web with a bundled ffmpeg script — AV1 and H.264 MP4s plus a poster, with HEVC on request, or VP9 WebM and HEVC with alpha for transparent video — and embed it with the right source order

6 skills

64

Similar plugins

superpowers

claudecodex

Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques

15 skills · hooks

obra/superpowers 316,836

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

Maintain secure-npm-package?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins6 plugins