CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

pnpm

Node.js package manager with strict dependency resolution. Use when running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides, config dependencies, or the global virtual store.

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is an exemplary index-style overview: lean, pnpm-specific, and organized into Core/Features/Best Practices tables whose links all resolve to real one-level-deep reference files. Deductions are minor — a small amount of time-stamped version detail in the main flow, and executable examples living in references rather than the body.

DimensionReasoningScore

Conciseness

The ~50-line body is lean and focused on non-obvious pnpm-specific facts ("settings live in `pnpm-workspace.yaml`... using **camelCase** keys", "`.npmrc` is used **only** for authentication"). It is not anchor 5 because time-stamped version detail ("based on pnpm 12.18, generated at 2026-11-05") sits in the main body rather than a deprecated/old-patterns section, which the guidelines penalize.

4 / 5

Actionability

Concrete directives are present ("Always use `--frozen-lockfile` (or `pnpm ci`) in CI", "check `pnpm-workspace.yaml` for settings/workspace structure and `.npmrc` only for auth") and table rows name specific commands ("install/add/remove/update, run, dlx/pnx"). It falls short of anchor 5's copy-paste-ready coverage because most executable detail is delegated to reference files rather than demonstrated inline.

4 / 5

Workflow Clarity

The orientation path is clear: absorb the config model, check the two config files with stated purposes, and use the categorized task-to-reference tables for everything else, with the CI safety practice stated explicitly. It is not anchor 5 because the body itself contains no explicit multi-step sequence with validation checkpoints; it exceeds anchor 3 because the critical guidance is unambiguous and nothing is poorly defined.

4 / 5

Progressive Disclosure

A compact overview with three categorized tables linking to all 19 reference files (every link resolves to a real file), and the references are one level deep — reference files contain no nested .md chains. This matches anchor 5's "clear overview with well-signaled one-level-deep references; content appropriately split; easy navigation".

5 / 5

Total

17

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description in third-person voice with an explicit 'Use when' clause and concrete pnpm-specific trigger terms including a settings file name. Both what and when are clearly answered; the only weaknesses are a slightly thin action list in the what-clause and minor overlap risk with generic npm/yarn dependency-management phrasing.

DimensionReasoningScore

Specificity

"running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides, config dependencies, or the global virtual store" enumerates several concrete capability areas. It falls short of anchor 5 because common actions like installing/adding packages, publishing, or CI usage are not named, while it clearly exceeds anchor 3's "1-2 concrete actions".

4 / 5

Completeness

It explicitly answers both: what ("Node.js package manager with strict dependency resolution") and when ("Use when running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides...") with concrete trigger phrases, matching anchor 5. It is not anchor 4 because the 'when' clause is highly specific rather than something that "could be more explicit".

5 / 5

Trigger Term Quality

Natural terms users would say are present: "pnpm specific commands", "workspaces", "catalogs", "patches", "overrides", plus the file name "pnpm-workspace.yaml". A few natural variations are missing (e.g., "monorepo", "lockfile", "install/add packages"), matching anchor 4's "good keyword coverage; a few natural terms missing" rather than anchor 5's comprehensive synonym coverage.

4 / 5

Distinctiveness Conflict Risk

Distinct pnpm-only triggers ("pnpm-workspace.yaml", "catalogs", "config dependencies", "global virtual store") establish a clear niche, but the generic opening "Node.js package manager" and "managing dependencies" create minor overlap risk with npm/yarn skills, fitting anchor 4 ("mostly distinct; minor overlap risk with closely related skills") rather than anchor 5.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

antfu/skills

Path

skills/pnpm/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.