Summary

This skill lists the exact contents of an npm package tarball before publishing. It builds the package, creates a tarball, displays its contents via tar inspection, and cleans up. Users run it to verify what files will be included in an npm bundle, debug publish issues, or confirm package.json file configurations are correct.

Detected Capabilities

Trigger Keywords

Phrases that MCP clients use to match this skill to user intent.

Risk Signals

Referenced Domains

External domains referenced in skill content, detected by static analysis.

Use Cases

• Verify npm package contents before publishing to registry
• Debug what files are included in an npm tarball
• Confirm package.json 'files' field and .npmignore configuration
• Audit package contents for accidental inclusion of sensitive files

Quality Notes

• Skill scope is well-defined and tightly scoped to a single task: inspecting npm package contents
• Clear explanation of what determines package contents (files field, .npmignore, .gitignore, defaults)
• Script is simple and straightforward with appropriate use of set -e for safety
• Minor: Script does not document what to do if build or pack fails; tarball cleanup is skipped on error
• Minor: No error handling or informative output messages guide the user through the process
• Good: Skill correctly uses 'internal: true' metadata, indicating this is a supporting utility