no-npm

Name: no-npm
Rating: 5 (2 reviews)
Author: UAantovakul

Block every `npm`, `npx`, and `yarn` Bash/PowerShell invocation in Claude Code. If the user (or Claude itself) tries to run an npm-family command, issue a warning in BOLD letters and suggest the pnpm equivalent. This skill is the soft layer that pairs with the hard PreToolUse hook `block-npm.js`, which blocks the command at the harness level. Triggers: any command starting with `npm`, `npx`, or `y

2stars

Updated 27 days ago

View on GitHub ↗License: MIT

How to add

/plugin marketplace add UAantovakul/no-npm-claude

The exact command may vary by repository. Check the README on GitHub.

For the skill author

Drop this on your repo README

Shows your skill is listed on Skillteca, generates a backlink and trackable traffic.

[![Listada na Skillteca](https://www.skillteca.com.br/api/badge/no-npm/svg)](https://www.skillteca.com.br/skills/no-npm?utm_source=badge&utm_medium=readme&utm_campaign=badge)

#ai

Related skills

See all in Design e Frontend →

webapp-testing

143.8k

Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.

Design e Frontend#testby anthropics

brand-guidelines

143.8k

Applies Anthropic's official brand colors and typography to any artifact that may benefit from its look-and-feel. Use it when brand colors, style guidelines, visual formatting, or company design standards apply.

Design e Frontendby anthropics

frontend-design

143.8k

Creates distinctive, production-grade frontend interfaces with high design quality, generating creative, polished code and UI design that avoids generic AI aesthetics. Use for building web components, pages, and applications, or for styling/beautifying web UIs.

Design e Frontend#css#aiby anthropics

web-artifacts-builder

143.8k

Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.

Design e Frontend#css#aiby anthropics

Category alert

Get new Design e Frontend skills every Monday

One short email with only the new Design e Frontend skills. 4 minutes of reading, no spam, unsubscribe with one click.

You confirm your email on the first send. No spam. Unsubscribe with one click.

no-npm — block npm/npx/yarn, pnpm only

Why this skill exists

The npm ecosystem went through a series of major supply-chain attacks (Shai-Hulud Sep 2025, Shai-Hulud 2.0 Nov 2025, Mini Shai-Hulud May 2026, PackageGate Jan 2026). pnpm v11+ blocks lifecycle scripts by default (strictDepBuilds) and delays installation of fresh versions by 24 hours (minimumReleaseAge: 1440) — that closes the primary attack vectors.

Global user decision: no npm/npx/yarn in this environment.

What to

[Description truncada. Veja o README completo no GitHub.]

ShareX LinkedIn

Comments · No comments

No comments yet. Be the first.