Receber por email
← Voltar para o catálogo

no-npm

Block every `npm`, `npx`, and `yarn` Bash/PowerShell invocation in Claude Code. If the user (or Claude itself) tries to run an npm-family command, issue a warning in BOLD letters and suggest the pnpm equivalent. This skill is the soft layer that pairs with the hard PreToolUse hook `block-npm.js`, which blocks the command at the harness level. Triggers: any command starting with `npm`, `npx`, or `y

2estrelas
Atualizado há 5 meses

Ver no GitHub ↗ Licença: MIT

Como adicionar

/plugin marketplace add UAantovakul/no-npm-claude

O comando exato pode variar conforme o repositório. Confira o README no GitHub.

Para o autor da skill

Cole no README do seu repo

Mostra que sua skill está catalogada na Skillteca, gera backlink e tráfego rastreável.

[![Skillteca](https://www.skillteca.com.br/api/badge/no-npm/svg)](https://www.skillteca.com.br/skills/no-npm)
#ai

Alerta por categoria

Receba novas skills de Design e Frontend toda segunda

1 email curto, só com as skills novas de Design e Frontend. 4 minutos de leitura, sem spam, cancela com 1 clique.

Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.

Ler descrição completa

no-npm — block npm/npx/yarn, pnpm only

Why this skill exists

The npm ecosystem went through a series of major supply-chain attacks (Shai-Hulud Sep 2025, Shai-Hulud 2.0 Nov 2025, Mini Shai-Hulud May 2026, PackageGate Jan 2026). pnpm v11+ blocks lifecycle scripts by default (strictDepBuilds) and delays installation of fresh versions by 24 hours (minimumReleaseAge: 1440) — that closes the primary attack vectors.

Global user decision: no npm/npx/yarn in this environment.

What to

[Description truncada. Veja o README completo no GitHub.]

Compartilhar X LinkedIn