list-npm-package-content
List the contents of an npm package tarball before publishing. Use when the user wants to see what files are included in an npm bundle, verify package contents, or debug npm publish issues.
How do I install this agent skill?
npx skills add https://github.com/vercel/ai --skill list-npm-package-contentIs this agent skill safe to install?
- Gen Agent Trust Hubpass
This skill is a standard developer utility used to inspect npm package contents before publication. It performs local build and packing operations using pnpm and tar. No malicious behaviors, network activity, or unauthorized data access were detected.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
- Runlayerpass
1/2 files flagged
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
What does this agent skill do?
List npm Package Content
This skill lists the exact contents of an npm package tarball - the same files that would be uploaded to npm and downloaded by users.
Usage
Run the script from the package directory (e.g., packages/ai):
bash scripts/list-package-files.sh
The script will build the package, create a tarball, list its contents, and clean up automatically.
Understanding Package Contents
The files included are determined by:
filesfield inpackage.json- explicit allowlist of files/directories.npmignore- files to exclude (if present).gitignore- used if no.npmignoreexists- Always included:
package.json,README,LICENSE,CHANGELOG - Always excluded:
.git,node_modules,.npmrc, etc.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/vercel/ai/list-npm-package-content">View list-npm-package-content on skillZs</a>