Npm Publish
This skill automates publishing npm packages to your registry, streamlining deployment and saving development time.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add npm-publish npx -- -y @trustedskills/npm-publish
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"npm-publish": {
"command": "npx",
"args": [
"-y",
"@trustedskills/npm-publish"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
The npm-publish skill automates the process of uploading and publishing packages to the npm registry, streamlining the release workflow for Node.js developers. It handles authentication, versioning, and metadata configuration to ensure your libraries are distributed correctly without manual CLI intervention.
When to use it
- Automating the release of new versions of a library after code changes are committed.
- Deploying private packages to scoped registries or public npm accounts securely.
- Managing multiple package releases in a CI/CD pipeline to ensure consistent deployment.
- Publishing packages with specific tags (e.g.,
latest,beta) based on semantic versioning rules.
Key capabilities
- Authenticates with the npm registry using stored credentials or tokens.
- Reads and validates
package.jsonmetadata before upload. - Handles file attachments, including tarballs and source code archives.
- Supports tagging strategies for different release channels.
Example prompts
- "Publish version 1.2.0 of my 'data-utils' package to npm using the configured registry credentials."
- "Upload the latest build artifacts for 'api-client' and tag it as 'beta' on the npm registry."
- "Automatically publish any new packages in the current directory that pass validation checks."
Tips & gotchas
Ensure your AI agent has access to valid npm authentication tokens or API keys, as publishing requires secure identity verification. Always verify that package.json fields like name and version are unique before triggering a publish action to avoid registry conflicts.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.