Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

pnpm-plugin-skills

Package Overview
Dependencies
Maintainers
1
Versions
15
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

pnpm-plugin-skills

A pnpm plugin that automatically installs agent skills during `pnpm install`.

latest
Source
npmnpm
Version
0.10.0
Version published
Maintainers
1
Created
Source

pnpm-plugin-skills

A pnpm plugin that automatically installs agent skills during pnpm install.

How It Works

This plugin hooks into pnpm's preResolution lifecycle to run skill installation before dependency resolution. On every pnpm install, it:

  • Reads skills.json from the workspace root
  • Resolves and syncs skills-lock.yaml
  • Materializes skills into the configured installDir
  • Creates symlinks for configured linkTargets
  • Skips if the lockfile hasn't changed (fast path)

Setup

Install as a config dependency:

pnpm add pnpm-plugin-skills --config

Then create a skills.json in your project root:

{
  "installDir": ".agents/skills",
  "linkTargets": [".claude/skills"],
  "skills": {
    "my-skill": "https://github.com/owner/repo.git#path:/skills/my-skill"
  }
}

Now pnpm install will automatically install your skills.

Architecture

The plugin is built as a single CJS bundle (via Rslib with autoExternal: false) that inlines all dependencies including skills-package-manager. This ensures it works as a standalone pnpmfile.cjs plugin without any external runtime dependencies.

pnpm-plugin-skills/
├── pnpmfile.cjs     # Plugin entry — exports { hooks: { preResolution } }
├── src/
│   └── index.ts     # Imports installCommand from skills-pm
└── dist/
    └── index.js     # Bundled CJS output (~350 kB, all deps inlined)

Build

pnpm build    # Builds with Rslib (CJS bundle mode)

FAQs

Package last updated on 15 May 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts