A powerful AI agent skill to search npm packages, analyze metadata, track download statistics, and verify security advisories directly within your development workflows.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install npm-registry
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install npm-registry using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is npm Registry Integration?
The npm Registry integration is a highly effective tool for AI-assisted development, allowing your coding agents to interact with the vast public and private registries of the npm ecosystem. As one of the core Openclaw Skills, this skill eliminates manual web lookups by providing developers and AI agents direct, programmable access to package search capabilities, version comparisons, security vulnerabilities, and download analytics.
By leveraging ClawLink for secure authentication and proxying, developers can safely query the registry without passing raw API keys in chat. This integration supports both rapid package discovery and complex metadata evaluation, enabling your AI agents to keep dependency trees secure and fully optimized.
npm Registry Integration Use Cases
- Package Discovery and Evaluation: Search the registry to find packages fitting specific criteria, ranking by quality or popularity.
- Dependency Verification: Inspect metadata and release histories for specific npm versions directly from the prompt.
- Vulnerability Assessment: Retrieve real-time security advisories for dependencies to prevent supply chain risks.
- Download Metrics Analysis: Query download statistics over defined periods to assess package health, adoption, and maintenance activity.
How npm Registry Integration Works
- Triggering the Command: The user requests npm data (e.g., search or metadata lookup) inside an active Openclaw environment.
- ClawLink Authentication Proxy: The skill routes requests through ClawLink, which handles credential management and injects secure credentials as needed.
- API Query Execution: The proxy interacts directly with the official npm Registry API endpoints.
- Response Parsing & Security Formatting: Safe operations (read-only) return data directly to the chat, while any sensitive write operations require explicit confirmation steps.
- Interactive UI Update: Results, security flags, or analytical breakdowns are presented to the user directly in the chat session.
npm Registry Integration Setup
To configure this integration within your workspace, follow these steps to add it to your active Openclaw Skills list:
# 1. Install the verified ClawLink plugin from ClawHub
openclaw plugins install clawhub:clawlink-plugin
# 2. Allow the plugin within your configuration
openclaw config set tools.alsoAllow '[\"clawlink-plugin\"]' --strict-json
# 3. Restart the local gateway service
openclaw gateway restart
Once restarted, run a /new command in your chat window to refresh the registry catalog. Navigate to https://claw-link.dev/dashboard?add=npm to pair your npm account securely.
npm Registry Integration Data Schema & Taxonomy
The npm Registry skill manages requests and schemas via structured parameters. Below is how the primary tool definitions organize their inputs:
| Tool Name | Parameter Key | Type | Description |
|---|---|---|---|
npm_search_packages |
query |
String | Search term (e.g., framework name) |
size |
Integer | Number of results to return (default 10) | |
npm_get_package |
package_name |
String | Scoped or public package name |
version |
String | Version or 'latest' release | |
npm_get_download_counts |
package_name |
String | The package name to query |
start / end |
String (YYYY-MM-DD) | Custom timeline range for download counts | |
npm_get_advisories |
package_name |
String | Target package for security vulnerability search |
All scoped package queries must be formatted in lowercase and include the organization prefix (e.g., @org/package-name).
npm Registry Integration Advanced Features
- Secure Multi-Agent Authentication: Centralized token management via ClawLink dashboard so multiple agent instances share authenticated npm access without key exposure.
- Implicit Read Safety vs. Explicit Write Guards: Distinct execution flows where read-only calls (like searches) run instantly, while high-risk configuration modifications trigger interactive user previews and confirmation gates.
- Rate Limit Resilience: Integrates exponential backoff capabilities designed to handle npm public API limit responses gracefully.
- Scope-Sensitive Resolvers: Seamlessly queries both public repository packages and authenticated private scoped registry spaces in a unified context.
SKILL.md
Loading
Related Openclaw Skills
OneNote Notes
A comprehensive plugin enabling OpenClaw agents to read, write, and manage Microsoft OneNote notebooks, sections, and pages securely via ClawLink.
Omnisend Marketing
A highly functional AI agent skill to manage Omnisend campaigns, contact databases, performance metrics, and automated ecommerce workflows via ClawLink.
Paystack Payments
A powerful skill enabling OpenClaw developers to securely manage Paystack customers, verify transactions, generate payment pages, and run payment operations using ClawLink.
Razorpay Payments
An AI agent skill to seamlessly manage Razorpay customer profiles, invoicing, order processing, and payment workflows directly from your chat interface.
New Relic Observability
A powerful monitoring and observability skill that integrates New Relic NRQL queries, dashboards, and alerts directly into your AI workflows.
Mural
Integrate Mural with managed OAuth via ClawLink to automate visual boards, sticky notes, and workspace hierarchies.
Featured*
