# NPM Audit Policy

> Apply npm audit checks without unsafe forced dependency churn.

- Skill: `onfire7777/npm-audit-policy` (Agent Skill)
- Install (CLI): `npx skillmds@latest add onfire7777/npm-audit-policy`
- Raw SKILL.md: https://api.skillmd.com/api/skills/onfire7777/npm-audit-policy/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: onfire7777 (https://skillmd.com/u/onfire7777)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/onfire7777/npm-audit-policy

---


# npm Audit Policy

- Run `npm audit --audit-level=high`.
- Run `npm run audit:security`.
- Never run `npm audit fix --force`.
- Queue dependency changes separately unless required for the active blocker.