Manage pnpm Projects and Workspaces
Complex pnpm workspaces require precise commands and configuration. This skill provides focused guidance for dependencies, CI, migrations, patches, performance, and supply-chain controls.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "pnpm" from https://skillstore.io/skills/antfu-pnpm.md and its manifest at https://skillstore.io/api/skills/antfu-pnpm/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "pnpm". Set up reliable pnpm CI for a monorepo.
Expected outcome:
Using "pnpm". Migrate a Yarn workspace to pnpm.
Expected outcome:
Using "pnpm". Reduce dependency installation risk.
Expected outcome:
The audit found no prompt injection or data-exfiltration intent. Most static alerts are Markdown syntax, example paths, placeholders, or safe configuration guidance. Confirmed concerns include credential-file inspection, recursive permission changes, third-party registry use, blanket build approval, unpinned execution, and destructive cleanup.
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/antfu-pnpm/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/antfu-pnpm?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/antfu-pnpm?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/antfu-pnpm/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/antfu-pnpm.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>antfu. (2026). pnpm security audit report (audit version 5) [Author version 2026.6.22]. Skillstore. https://skillstore.io/skills/antfu-pnpm/audits/5@techreport{antfu-antfu-pnpm-2026,
author = {antfu},
title = {pnpm security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/antfu-pnpm/audits/5},
note = {Author version 2026.6.22}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "pnpm security audit report (audit version 5)"
version: "2026.6.22"
type: report
authors:
- name: "antfu"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/antfu-pnpm/audits/5"
identifiers:
- type: other
value: "skillstore:antfu-pnpm:audit:5"
description: "Skillstore immutable audit report identifier"
Choose pnpm commands, dependency types, version policies, and verification steps for a Node.js application.
Configure workspace packages, catalogs, filters, shared settings, stores, and CI workflows across many projects.
Plan a controlled migration from npm, Yarn, Lerna, or older pnpm configuration with rollback steps.
Help me add [package] to [project]. Check its dependency type, then propose the pnpm command and verification steps.
Design a pnpm workspace for [apps and packages]. Provide the layout, required settings, catalog strategy, and installation steps.
Review [CI configuration] for pnpm. Identify caching, version pinning, lockfile, script approval, and trust issues, then recommend precise changes.
Plan a migration from [current package manager] to [target]. Include backups, dependency validation, configuration changes, rollback steps, and security checks.
Author
antfuLicense
MIT
Author version
v2026.6.22
Skillstore revision
r2
Ref
89edfdc710d0846129dcee6a929477b04f08052c
Maintenance freshness
7/24/2026
Usage
6 downloads · 219 views
Improve Vue Router Navigation
Vue Router mistakes can cause stale data, redirect loops, and unreliable navigation. This skill provides focused Vue Router 4 patterns for implementation and review.
Build Reliable Vue Tests
Vue tests often fail because asynchronous rendering, framework internals, and test-runner configuration are handled incorrectly. This skill provides focused patterns for Vitest, Vue Test Utils, Pinia, Suspense, Teleport, and Playwright.
Build Better Vue 3 Applications
Vue projects become difficult when reactivity, component boundaries, and data flow are inconsistent. This skill applies structured Vue 3 guidance throughout implementation and review.
Build Modern Vue 3 Components
Vue 3 APIs and component patterns can be difficult to apply consistently. This skill provides focused guidance for typed Composition API development.
Configure and Extend Vite Projects
Vite configuration can become difficult across plugins, SSR, and Rolldown migrations. This skill provides focused guidance and proven patterns for those tasks.
Configure UnoCSS With Confidence
UnoCSS projects often fail when generated utilities ignore the active presets and configuration. This skill grounds recommendations in project settings and focused UnoCSS references.
Manage Scalable Monorepos
by sickn33
Monorepos become difficult when dependencies, builds, and releases lack consistent structure. This skill provides practical patterns for workspaces, caching, CI, and publishing.
Automate DevOps Pipelines and Deployments
by alirezarezvani
DevOps work often requires repeatable pipeline, infrastructure, and deployment patterns. This skill provides scripts and reference guides for CI/CD, IaC, deployment, and operations review.
Coordinate Cloud DevOps Workflows
by sickn33
Cloud delivery work often spans many tools and phases. This skill organizes infrastructure, CI/CD, Kubernetes, monitoring, security, costs, and recovery work into clear prompts.
Build Terraform Infrastructure Workflows
by sickn33
Terraform work often spans setup, modules, state, environments, pipelines, and security controls. This skill organizes those steps into a clear infrastructure workflow.
Coordinate DevOps Delivery
by Brownbull
DevOps work often spans pipelines, infrastructure, monitoring, and deployment decisions. This skill organizes those tasks into checklists, handoffs, and rollout plans.
Write Safer Bash Scripts
by wshobson
Bash scripts often fail on edge cases, unsafe variables, and partial cleanup. This skill provides practical defensive patterns for robust automation and CI/CD scripts.