---

name: npm-publish description: Use when publishing this package to npm — a version release (npm publish), verifying the registry/pi.dev listing, or diagnosing npm auth failures (E403 2FA/token errors). Token-based flow via NPM_TOKEN in .env.local with a temp userconfig, the leakage gate before every publish, post-publish verification and marker/badge upkeep. Trigger on "publish to npm", "npm release", "E403 publish error". metadata: user-invocable: 'false' model: sonnet

npm-publish

Read skills/npm-publish/SKILL.md in full before taking any action, then follow its complete workflow. The linked document is authoritative, including its prechecks, argument rules, and stop conditions.

Resolve this link relative to this SKILL.md, not the project working directory. The plugin root is three directories above this file. Resolve package paths such as skills/ and scripts/ from that root; resolve relative links inside the canonical document from its own directory. Keep the user’s project as the target of project operations.

Regenerate with node scripts/generate-codex-skills.mjs.