📦

antfu

Name: antfu
Author: antfu

v2026.06.22 Content revision r2 High Risk ⚙️ External commands📁 Filesystem access🌐 Network access

Apply Anthony Fu's JavaScript Conventions

JavaScript and TypeScript projects often accumulate inconsistent tooling and structure. This skill applies Anthony Fu's conventions for linting, testing, applications, libraries, and monorepos.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "antfu" from https://skillstore.io/skills/antfu-antfu.md and its manifest at https://skillstore.io/api/skills/antfu-antfu/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/antfu-antfu.md Signed manifest GET /api/skills/antfu-antfu/manifest Signed lockfile GET /api/skills/antfu-antfu/lockfile

Test it

Using "antfu". Review my existing TypeScript project and identify convention gaps.

Expected outcome:

A prioritized review covering file structure, imports, comments, tests, linting, and package scripts.
Each recommendation distinguishes required corrections from optional opinionated changes.
Existing project conventions remain unchanged until the user approves edits.

Using "antfu". Prepare my Vue package for pure ESM publishing.

Expected outcome:

A migration plan covering tsdown, declarations, package exports, API snapshots, build freshness checks, tests, and release safeguards.

Security Audit

High Risk

v6 • 7/23/2026 Open versioned report

Forty-five static alerts are false positives caused by Markdown, fixed paths, or standard configuration examples. Ten alerts confirm package-manager, script, lint-fix, and hook execution guidance. No prompt injection or secret access was found; mutable third-party Actions create a high-severity supply-chain risk.

Files scanned

942

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

references/setting-up.md:48 references/setting-up.md:70 references/setting-up.md:87-92

Mutable Third-Party GitHub Actions References

Recommended workflows track sxzz/workflows main. A compromised update could run with repository write or OIDC permissions during release.

All reusable workflows use the mutable main ref, and the release job explicitly grants contents write and id-token write.

Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:60-61

Ruby/shell backtick execution

| `ni` | Install dependencies |

The documented ni command installs dependencies, which can execute package lifecycle scripts.

Medium

SKILL.md:61

Ruby/shell backtick execution

| `ni <pkg>` / `ni -D <pkg>` | Add dependency / dev dependency |

The documented command installs a named package, potentially introducing unreviewed code and lifecycle scripts.

Medium

SKILL.md:62-63

Ruby/shell backtick execution

| `nr <script>` | Run script |

The nr command runs repository-defined scripts, which may execute arbitrary commands from package configuration.

Medium

SKILL.md:63-64

Ruby/shell backtick execution

| `nu` | Upgrade dependencies |

The nu command upgrades dependencies and lockfiles, potentially replacing trusted executable package code.

Medium

SKILL.md:64-65

Ruby/shell backtick execution

| `nun <pkg>` | Uninstall dependency |

Package removal changes dependency state and can invoke package-manager lifecycle behavior.

Medium

SKILL.md:65

Ruby/shell backtick execution

| `nci` | Clean install (`pnpm i --frozen-lockfile`) |

The clean install command executes dependency installation and may run lifecycle scripts from the lockfile.

Medium

SKILL.md:66

Ruby/shell backtick execution

| `nlx <pkg>` | Execute package (`npx`) |

The nlx command executes a selected registry package, creating direct third-party code-execution risk.

Medium

SKILL.md:72-78

Ruby/shell backtick execution

```bash

The cited Bash block runs fast-npm-meta through nlx, executing registry package code and making metadata requests.

Medium

SKILL.md:110-116

Ruby/shell backtick execution

When completing tasks, run `pnpm run lint --fix` to format the code and fix coding style.

The skill directs agents to run a project-defined lint script with fixes, which executes repository code and modifies files.

Medium

SKILL.md:116-126

Ruby/shell backtick execution

```json

The configuration installs Git hooks that run pnpm and npx commands during prepare and commit workflows.

Risk Factors

⚙️ External commands (36)

📁 Filesystem access (8)

references/monorepo.md:86 references/monorepo.md:93 references/monorepo.md:86 references/monorepo.md:93 references/setting-up.md:48 references/setting-up.md:70 references/setting-up.md:87 SKILL.md:38

🌐 Network access (1)

SKILL.md:70

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/antfu-antfu/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/antfu-antfu/security.svg)](https://skillstore.io/skills/antfu-antfu?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/antfu-antfu?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/antfu-antfu/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/antfu-antfu.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

antfu. (2026). antfu security audit report (audit version 6) [Author version 2026.06.22]. Skillstore. https://skillstore.io/skills/antfu-antfu/audits/6

BibTeX citation

@techreport{antfu-antfu-antfu-2026,
  author = {antfu},
  title = {antfu security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/antfu-antfu/audits/6},
  note = {Author version 2026.06.22}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "antfu security audit report (audit version 6)"
version: "2026.06.22"
type: report
authors:
  - name: "antfu"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/antfu-antfu/audits/6"
identifiers:
  - type: other
    value: "skillstore:antfu-antfu:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Standardize a TypeScript Project

Apply consistent file organization, imports, linting, formatting, tests, and package scripts to an existing codebase.

Build a Vue Application

Choose Vite or Nuxt, configure explicit imports, and establish Vue component and Storybook conventions.

Publish a TypeScript Library

Configure pure ESM builds, package exports, declaration files, API snapshots, and release preparation.

Try These Prompts

Review Project Conventions

Review this TypeScript project against Anthony Fu's conventions. List mismatches, prioritize low-risk changes, and do not edit files.

Configure ESLint

Configure @antfu/eslint-config for this Vue and TypeScript project. Preserve existing scripts and explain every required dependency.

Create a Monorepo

Set up a pnpm workspace with package scripts, named catalogs, and centralized aliases. Adapt every package name to this repository.

Prepare Library Publishing

Prepare this TypeScript monorepo for pure ESM publishing with tsdown, API snapshots, stale-build checks, CI, and minimal release permissions.

Best Practices

Review existing project conventions before applying opinionated defaults.
Pin third-party automation to reviewed commit hashes and grant minimal permissions.
Run focused tests and lint checks after changing configuration or package scripts.

Avoid

Do not replace established project conventions without explicit user approval.
Do not execute package binaries or release commands without reviewing package identity and repository state.
Do not copy mutable third-party workflow references into repositories with write permissions.