Skip to main content

npm-git-install

Facilitates the installation of npm packages directly from GitHub repositories, enabling access to private or unreleased versions.

Install this skill

or
52/100

Security score

The npm-git-install skill was audited on Mar 7, 2026 and we found 18 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 169

Template literal with variable interpolation in command context

SourceSKILL.md
169```bash
medium line 183

Template literal with variable interpolation in command context

SourceSKILL.md
183```bash
medium line 118

Access to hidden dotfiles in home directory

SourceSKILL.md
118| nvm (macOS) | `~/.nvm/versions/node/vX.X.X/lib/node_modules/` | `~/.nvm/versions/node/vX.X.X/bin/` |
low line 160

Access to hidden dotfiles in home directory

SourceSKILL.md
160cat ~/.ssh/id_ed25519.pub
low line 184

Access to hidden dotfiles in home directory

SourceSKILL.md
184# ~/.npmrc
low line 199

Access to hidden dotfiles in home directory

SourceSKILL.md
199mkdir ~/.npm-global
low line 200

Access to hidden dotfiles in home directory

SourceSKILL.md
200npm config set prefix '~/.npm-global'
low line 201

Access to hidden dotfiles in home directory

SourceSKILL.md
201echo 'export PATH=~/.npm-global/bin:$PATH' >> ~/.bashrc
low line 202

Access to hidden dotfiles in home directory

SourceSKILL.md
202source ~/.bashrc
high line 160

Access to SSH directory

SourceSKILL.md
160cat ~/.ssh/id_ed25519.pub
medium line 227

Access to system keychain/keyring

SourceSKILL.md
227git config --global credential.helper osxkeychain
low line 174

External URL reference

SourceSKILL.md
174npm install git+https://<token>@github.com/owner/private-repo.git
low line 178

External URL reference

SourceSKILL.md
178npm install git+https://${GITHUB_TOKEN}@github.com/owner/private-repo.git
low line 215

External URL reference

SourceSKILL.md
215# https://git-scm.com/download/win
low line 237

External URL reference

SourceSKILL.md
237npm install git+https://... --verbose 2>&1 | tee npm-install.log
low line 248

External URL reference

SourceSKILL.md
248npm install -g git+https://...
low line 359

External URL reference

SourceSKILL.md
359- [How To Install NPM Packages Directly From GitHub](https://www.warp.dev/terminus/npm-install-from-github)
low line 360

External URL reference

SourceSKILL.md
360- [npm install from GitHub - Stack Overflow](https://stackoverflow.com/questions/17509669/how-to-install-an-npm-package-from-github-directly)
Scanned on Mar 7, 2026
View Security Dashboard