feat: ship as npm package via @netresearch/agent-skill-coordinator#28
Merged
Conversation
Adds a package.json so the skill is npm-installable straight from this GitHub repo (no npm-registry publication required to start). README gains a parallel 'npm (Node Projects)' section under Installation, mirroring the existing 'Composer (PHP Projects)' section. Same pattern applied across the Netresearch skill collection in 2026-05. Coordinator: https://github.com/netresearch/node-agent-skill-coordinator Sibling PRs already merged on git-workflow-skill, github-project-skill, security-audit-skill. Version stays at 0.0.0-source until npm publication is decided separately. Signed-off-by: Sebastian Mendel <info@sebastianmendel.de>
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request adds npm support for the CLI tools skill by introducing a package.json file and updating the README.md with installation instructions. A review comment suggests including the catalog/ and references/ directories in the package.json files list to ensure all required tool definitions are available in the published package.
Contributor
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned FilesNone |
There was a problem hiding this comment.
Pull request overview
This PR makes the skill consumable from Node projects by adding npm package metadata and documenting the Node installation flow alongside the existing Composer-based installation. It fits the repository’s distribution story by exposing the existing skill bundle to the @netresearch/agent-skill-coordinator discovery mechanism.
Changes:
- Add a new
package.jsonso the repository can be installed as an npm package directly from GitHub. - Declare the skill entrypoint for Node-side discovery via the custom
aiAgentSkillmanifest field. - Extend the README with npm installation instructions, including the pnpm
postinstallallowlist note.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
package.json |
Adds npm package metadata, packaged file list, and the coordinator peer dependency. |
README.md |
Documents npm-based installation and pnpm configuration for Node consumers. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Installer scripts (skills/cli-tools/scripts/installers/*.sh and lib/catalog.sh) read tool metadata from $ROOT/catalog/*.json. Without this dir in the npm tarball, npm consumers got a partial skill that registered but failed at install time. Caught by reviewer. Signed-off-by: Sebastian Mendel <sebastian.mendel@netresearch.de>
Merged
CybotTM
added a commit
that referenced
this pull request
May 15, 2026
## Release v1.7.0 Minor release. Bumps `.claude-plugin/plugin.json` and `skills/cli-tools/SKILL.md` frontmatter `metadata.version` from `1.6.1` to `1.7.0`. ### Highlights since v1.6.1 - Ship the skill as an npm package via `@netresearch/agent-skill-coordinator`, with a follow-up fix to include the `catalog/` directory in the tarball (#28). - Release workflow grants SLSA provenance permissions and drops the deprecated `workflow_dispatch.bump` input (#26, #27). - CI plumbing: forward the `bump` input from `workflow_dispatch` to the reusable release workflow (#25). ### Release plan After merge: tag main with a signed annotated tag, push, the `skill-repo-skill` reusable workflow publishes archives + SHA256SUMS with cosign + SLSA attestation, then narrative notes get applied via `gh release edit ... --notes-file`.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
package.jsonso the skill is npm-installable straight from this GitHub repo (no npm-registry publication required to start).How discovery works (consumer side)
After install, the coordinator's
postinstallwalksnode_modules, finds this package viaaiAgentSkill: skills/cli-tools/SKILL.md, validates the frontmatter, and writes a<skills_system>block into the project'sAGENTS.md. Same shape as the Composer plugin's output.Why version stays at
0.0.0-sourceVersioning still lives in git tags and the existing Composer release workflow. A real npm version would be set at publish time; until then,
0.0.0-sourceis the standard "this manifest exists for tooling, not as a release marker" placeholder.Sibling PRs (merged)
Coordinator: https://github.com/netresearch/node-agent-skill-coordinator (
@netresearch/agent-skill-coordinator@0.1.2)