Xpersona
agentCLAWHUBUnverified

npm Registry

Search npm packages, inspect metadata and versions, review download stats, and check security advisories. Use this skill when users want to explore npm regis... Skill: npm Registry Owner: hith3sh Summary: Search npm packages, inspect metadata and versions, review download stats, and check security advisories. Use this skill when users want to explore npm regis... Tags: latest:1.0.5 Version history: v1.0.5 | 2026-06-09T07:14:10.720Z | user Add UTM attribution tags (utm_source=clawhub) to ClawLink branding links so visits from this skill page are tracked as a distinct traffic

OpenClaw
View on ClawHubHomepage

Rank

62

Safety

84

Downloads

2.5k

Updated

Oct 9, 2026

Version

1.0.5

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 2.5K downloads reported by the source. Last updated 10/9/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Oct 9, 2026
Protocol compatibility
OpenClawcompatibility · observed Oct 9, 2026
Adoption signal
2.5K downloadsadoption · observed Oct 9, 2026
Latest release
1.0.5release · observed Jun 9, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s173vws87a7ss71xf9rq53k5gd8568kv:npm-registry
  1. Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-hith3sh-npm-registry/snapshot"

Documentation

CLAWHUB

59,397 characters of source documentation, loaded on request.

Extracted files

3 files captured from the source.

SKILL.md

---
name: npm-registry
description: Search npm packages, inspect metadata and versions, review download stats, and check security advisories. Use this skill when users want to explore npm registry data, verify package integrity, or monitor package health via the npm API.
---

# npm Registry

![npm Registry](https://raw.githubusercontent.com/ClawLink-HQ/clawlink/main/public/images/brand-logos/npm.svg)

Access the npm public registry via the npm API. Search packages, inspect metadata and versions, review download statistics, and check security advisories and registry health.

This skill uses [ClawLink](https://claw-link.dev/?utm_source=clawhub&utm_medium=referral&utm_content=npm-registry) for hosted connection flows and credentials so you do not need to configure npm API access yourself.

### Setup in 3 Steps

| Step 1: Install | Step 2: Pair Account | Step 3: Connect npm |
|:---:|:---:|:---:|
| ![Install](https://raw.githubusercontent.com/ClawLink-HQ/clawlink/main/public/images/pairing/initialstep_1.gif) | ![Pair](https://raw.githubusercontent.com/ClawLink-HQ/clawlink/main/public/images/approve_process.gif) | *App-specific connection GIF coming soon* |
| Run the install command in OpenClaw | Sign in and approve the device | Open the dashboard and connect npm |

## How It Works

```
┌─────────────────┐     ┌──────────────┐     ┌──────────────────┐
│   OpenClaw      │────▶│   ClawLink   │────▶│   npm Registry    │
│   (User Chat)   │     │   (API Key)  │     │   (npmjs.com)    │
└─────────────────┘     └──────────────┘     └──────────────────┘
          │                       │                       │
          │  1. Install Plugin │                       │
          │  2. Pair Device      │                       │
          │  3. Connect npm       │                       │
          │ │  4. Secure Proxy      │
          │                       │  5. API Requests │
          │                       │                       │
          ▼                       ▼                       ▼
    ┌──────────┐           ┌──────────┐           ┌──────────┐
    │  SKILL   │           │ Dashboard│           │  npm │
    │  File    │           │ Auth     │           │ Registry │
    └──────────┘           └──────────┘           └──────────┘
```

## Install

Install the verified ClawLink plugin from ClawHub. After the user confirms, complete the full setup so ClawLink tools are visible in the next OpenClaw chat.

```bash
openclaw plugins install clawhub:clawlink-plugin
openclaw config set tools.alsoAllow '["clawlink-plugin"]' --strict-json
openclaw gateway restart
```

Then tell the user: "OpenClaw has been restarted. Send `/new` as a standalone message to start a fresh chat, then ask for npm again."

## Quick Start

```bash
# Search for packages
clawlink_call_tool --tool "npm_search_packages" --params '{"query": "express", "size": 10}'

# Get package metadata
clawlink_call_tool --tool "npm_get_package" --params '{"package_name": "express"}'

# Get download statis

_meta.json

{
  "ownerId": "kn713pxvayh8fjhb503zjb8yxh815j54",
  "slug": "npm-registry",
  "version": "1.0.5",
  "publishedAt": 1780989250720
}

skill-card.md

## Description:

Search npm packages, inspect metadata and versions, review download stats, and check security advisories.

This skill is ready for commercial/non-commercial use.

## Publisher:

[hith3sh](https://clawhub.ai/user/hith3sh)

### License/Terms of Use:

MIT-0

## Use Case:

Developers, package maintainers, and security reviewers use this skill to search npm packages, inspect package metadata and versions, review download activity, and check advisories through npm registry tooling.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: The skill asks the user to install and allow a third-party ClawLink plugin that can use an npm account, including private package data.

Mitigation: Install only if ClawLink is trusted, review permissions in the ClawLink dashboard, and prefer a least-privilege npm account or token.

Risk: Write operations such as token deletion or scope changes can affect npm account state.

Mitigation: Preview and explicitly confirm write operations before execution, and reject actions that do not match the user's intent.

## Reference(s):

- [npm Documentation](https://docs.npmjs.com/)
- [npm Registry API](https://github.com/npm/registry)
- [npm Security Advisories](https://www.npmjs.com/advisories)
- [ClawLink Docs](https://docs.claw-link.dev/openclaw)
- [ClawLink Verification](https://claw-link.dev/verify)

## Skill Output:

**Output Type(s):** [text, markdown, shell commands, configuration, guidance]

**Output Format:** [Markdown with inline shell commands and JSON parameter examples]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [May include npm package metadata, download statistics, advisory checks, connection guidance, and confirmation steps for write operations.]

## Skill Version(s):

1.0.5 (source: release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

Related agents

Same protocol, similar job.

Github ReposUpdated 2h agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/hith3sh/skills/npm-registry",
      "sourceUrl": "https://clawhub.ai/hith3sh/skills/npm-registry",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T14:45:19.063Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-hith3sh-npm-registry/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-hith3sh-npm-registry/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-10-09T14:45:19.063Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "2.5K downloads",
      "href": "https://clawhub.ai/hith3sh/npm-registry",
      "sourceUrl": "https://clawhub.ai/hith3sh/npm-registry",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T14:45:19.063Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "1.0.5",
      "href": "https://clawhub.ai/hith3sh/npm-registry",
      "sourceUrl": "https://clawhub.ai/hith3sh/npm-registry",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-06-09T07:14:10.720Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-hith3sh-npm-registry/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-hith3sh-npm-registry/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 1.0.5",
      "description": "Add UTM attribution tags (utm_source=clawhub) to ClawLink branding links so visits from this skill page are tracked as a distinct traffic source.",
      "href": "https://clawhub.ai/hith3sh/npm-registry",
      "sourceUrl": "https://clawhub.ai/hith3sh/npm-registry",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-06-09T07:14:10.720Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 9, 2026.

Sponsored

Ads related to npm Registry and adjacent AI workflows.