npm-trustme

Automate npm Trusted Publisher setup for GitHub Actions via CLI.

7|2|Updated Jan 2, 2026
One-click install
npx skills add https://github.com/regenrek/npm-trustme --skill npm-trustme
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: npm-trustme
Source: https://github.com/regenrek/npm-trustme/tree/main/.codex/skills/npm-trustme
Command: npx skills add https://github.com/regenrek/npm-trustme --skill npm-trustme

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the setup of npm Trusted Publishers via a browser-driven workflow, reducing manual configuration and repeated authentication overhead.

Core Features & Use Cases

  • One-time WebAuthn approval to enable trusted publishing in GitHub Actions.
  • Browser automation with Playwright to configure publishers across repos.
  • Workflow generation for publishing across monorepos or multi-package projects.

Quick Start

Run npm-trustme to complete a one-time WebAuthn approval and automate Trusted Publisher setup.

Frequently Asked Questions about npm-trustme

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate npm Trusted Publisher setup for GitHub Actions?

Automate npm Trusted Publisher setup for GitHub Actions by running the npm-trustme CLI to complete a one-time WebAuthn approval and generate publishing workflows. It uses Playwright browser automation to configure publishers across repositories, reducing manual authentication overhead.

Can I configure Trusted Publishers across a monorepo with multiple packages?

Yes, you can configure Trusted Publishers across a monorepo with multiple packages. The automation supports generating workflows for multi-package projects, applying the one-time WebAuthn approval across the entire repository structure.

Do I need a specific Node version to run the npm-trustme CLI?

Yes, you need Node version 22 or higher to run the npm-trustme CLI. The tool relies on this environment to execute the Playwright browser automation and complete the required WebAuthn approval for configuring publishers.

Does npm Trusted Publisher configuration require WebAuthn approval every time?

No, npm Trusted Publisher configuration requires WebAuthn approval only once. After the initial browser-driven authentication, the tool automates the setup for GitHub Actions workflows without repeated manual authentication overhead.

Can I run the Trusted Publisher setup in headless mode?

Yes, you can run the Trusted Publisher setup in headless mode or interactive mode. The CLI supports configurable storage and cookies to facilitate browser automation through Playwright according to your environment needs.