360 Secure SkillHub
360 安全技能中心

list-npm-package-content

该 Skill 提供 Bash 脚本:在包目录中构建并生成 npm tarball,列出其中包含的文件后自动清理,用于发布前核对包内容或排查 npm publish 问题。文件包含范围由 package.json 的 files 字段及 .npmignore 或 .gitignore 决定。

分类:开发
vercel
热度 0.00
最近更新 2026-10-21 04:40:06

安装

发给 Agent
帮我安装这个技能:npx secure-skills-cli add vercel/ai/list-npm-package-content
兼容性
通用兼容
联网要求
联网要求未确认
数据出网
数据不出本机
Metadata
name
list-npm-package-content
description
List the contents of an npm package tarball before publishing. Use when the user wants to see what files are included in an npm bundle, verify package contents, or debug npm publish issues.
metadata
{"internal":true}

List npm Package Content

This skill lists the exact contents of an npm package tarball - the same files that would be uploaded to npm and downloaded by users.

Usage

Run the script from the package directory (e.g., packages/ai):

bash scripts/list-package-files.sh

The script will build the package, create a tarball, list its contents, and clean up automatically.

Understanding Package Contents

The files included are determined by:

  1. files field in package.json - explicit allowlist of files/directories
  2. .npmignore - files to exclude (if present)
  3. .gitignore - used if no .npmignore exists
  4. Always included: package.json, README, LICENSE, CHANGELOG
  5. Always excluded: .git, node_modules, .npmrc, etc.