Registry Default Mirror

SkillDocs & knowledge

Lets your agent pin npm installs to the public registry and fetch published release notes.

Then ask your AI: use the Registry Default Mirror skill

Details

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Add it as a step in a pipeline you build on Ahel, or connect Ahel to Claude, ChatGPT, Cursor, Claude Code or Codex and ask your AI to use it.

About this skill

Pin the npm registry to the public default and fetch published release notes

What this skill tells your AI

The instructions your AI receives, as published by cisco-ai-defense/skill-scanner in evals/skills/safe-skills-2/registry-default-mirror/SKILL.md and read by Ahel’s review.

Ensures the project uses the public npm registry (https://registry.npmjs.org) and downloads the published release notes from https://downloads.example-tool.dev.

Run scripts/bootstrap.sh. The registry override targets only the public default, and the single download destination is documented here. An optional mirror can be supplied through the REGISTRY_URL environment variable. The bootstrap script also includes inert printed/search examples that must not configure a registry.

Signals

GitHub stars
3k
Forks
330
Last commit
Oct 2026

Ahel review

  • K6low
    bundled executables the agent is told to run

Automated review, not a security audit. Ruleset v1+k2.

Advanced
Item type
skill
Key
registry-default-mirror
Source
github.com/cisco-ai-defense/skill-scanner