Skip to content
Back to skills

Npmjs

ASecurity

Act on npmjs.com as the logged-in user through a real browser: approve staged publishes, answer WebAuthn/2FA prompts, manage access tokens and package settings. Use when npm asks for a web approval or 2FA the CLI cannot answer, or the user asks for something on npmjs.com.

  • 69 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 3, 2026
developmentsecurity

Works with

  • cli

Security analysis

A100/100

Scanned September 20, 2026

npx -y skills add intentic/intentic --skill npmjs --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Npmjs?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Npmjs
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/intentic-npmjs/badge)](https://www.skillsdirectory.com/skills/intentic-npmjs)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: npmjs
description: Act on npmjs.com as the logged-in user through a real browser: approve staged publishes, answer WebAuthn/2FA prompts, manage access tokens and package settings. Use when npm asks for a web approval or 2FA the CLI cannot answer, or the user asks for something on npmjs.com.
---

# npmjs.com (connected browser)

Home: https://www.npmjs.com · a package: https://www.npmjs.com/package/<NAME> · account menu (tokens, 2FA,
packages) is under the avatar, top right.

${accounts}

This browser holds the account's passkey (the sandbox's own software security key), so WebAuthn/2FA prompts
complete by themselves: if a 2FA dialog appears, wait a beat and snapshot again before assuming it is stuck.

- Approve a staged or pending publish: open the approval link npm printed (or the package's page → pending
  publishes), click Approve: the 2FA step self-answers.
- CLI web-auth handoff: when `npm login` or `npm publish` prints an `https://www.npmjs.com/auth/...` URL,
  navigate to it here; the WebAuthn step completes and the CLI proceeds on its own.
- Tokens: avatar → `Access Tokens` to create or revoke granular tokens. Confirm with the user before revoking
  anything.
- Package settings: invite maintainers, change access, or deprecate from the package's Settings/Admin tab.
${tools}

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.