Check Npm
grafana/skills/skills/grafana-plugins/check-npmby grafana1ccacf29049fApache-2.0279 starsListed Oct 8, 2026Updated Oct 8, 2026Repository updated today
Audit a JavaScript/TypeScript repo's npm, yarn, or pnpm configuration for supply-chain hardening: tool version, lifecycle scripts, unsafe dependency protocols, and minimum release age ≥3 days. Use when the user invokes /check-npm or asks to audit package manager security, lifecycle scripts, git dependencies, ignore-scripts, min-release-age, allow-git, approvedGitRepositories, strictDepBuilds, or blockExoticSubdeps in a Grafana plugin or JS/TS project.
- 1ccacf29049fCurrentcommit 1ccacf2Published Oct 8, 2026
Source and attribution
Source:grafana/skillsinskills/grafana-plugins/check-npmat commit1ccacf2
License: Apache-2.0
Content belongs to its original authors. SourceWeft indexes it from a public repository.
More from grafana/skills
React 19 Plugin Migration
grafana
Guides migration of a Grafana plugin to React 19 compatibility through ordered build, dependency and source-code steps.
Plugin Bundle Size
grafana
Guides optimisation of Grafana app plugin bundle size using React.lazy, Suspense and webpack code splitting.
Grafana Scenes
grafana
Builds Grafana plugin pages with the @grafana/scenes framework, covering scenes, panels, variables and drilldowns.
Mimir
grafana
Guides standing up and operating Grafana Mimir for scalable, multi-tenant, long-term Prometheus and OTLP metrics storage.
K6 Trend Analysis
grafana
Analyze Grafana Cloud k6 test run trends over time. Detects slow metric drift (e.g., P95 latency creeping up while still passing thresholds), computes headroom to thresholds, flags anomalies, and recommends threshold tightening. Use when the user asks about test performance trends, wants to know if metrics are degrading, asks whether thresholds should be tightened, or wants a health check across recent runs for a specific test. Trigger on phrases like "how is my test trending", "is P95 getting worse", "check for performance regression", "should I tighten thresholds", "are my tests degrading", "show me trends for test X", "analyze my k6 test runs", or "is my test getting slower". Also trigger when a user asks to check all tests in a project -- run this skill once per test and synthesize.
K6 Test Maintenance
grafana
Maintains and improves existing k6 load-test scripts: threshold tightening, version migration, refactoring, and best-practice audits.
More in Security
Kyc Rules
anthropics
Applies a firm's KYC/AML rules grid to a parsed onboarding record, scoring risk and routing outcomes.
Compliance Tracking
anthropics
Tracks compliance requirements, audit readiness, and evidence for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
Dpop Adoption
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.
Secops Triage
Guides SOC analysts through triaging Google SecOps security alerts, from investigation to closure or escalation.
Secops Investigate
Guides SOC analysts through deep security incident and entity investigations in Google SecOps using UDM queries and timelines.
Secops Hunt
Guides proactive threat hunting in Google SecOps using UDM queries, IoC lookback, prevalence and outlier analysis.