Nodejs Patterns

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only Node.js backend patterns skill; the only noteworthy issue is a user-directed remote install command from an unpinned GitHub path.

This skill appears safe as an instructional guide for Node.js backend patterns. Before using the README install command, verify the GitHub repository and consider pinning to a specific trusted commit.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the remote repository changes later, a user following the README could install different content than what was reviewed here.

Why it was flagged

The README suggests installing from a remote GitHub path on the mutable main branch. This is disclosed and user-directed, but users should verify the source or pin a trusted revision before running it.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/backend/nodejs-patterns

Recommendation

Install only from a trusted source, review the repository first, and prefer a pinned commit or verified registry package when available.