NPkill

Clean up node_modules and .next folders to free up disk space using npkill. Specifically designed to help JavaScript and Next.js developers remove accumulated build artifacts that consume significant storage. Provides both interactive and automated cleanup options with safety checks to protect important system directories.

This skill appears coherent and does what it says — it is a wrapper documenting use of the npkill CLI. Before installing or running anything: 1) verify the npm package (npkill) publisher and version on the npm registry to ensure you get the official tool; 2) run `npkill --dry-run` and use interactive mode before any automated deletion; 3) be careful with `--directory` and `--delete-all --yes` since they can delete large sets of folders; 4) installing global npm packages requires elevated permissions on some systems — consider using a constrained environment if you are unsure about the package source.

Type: OpenClaw Skill Name: npkill Version: 1.0.1 The skill is classified as suspicious due to two main risky capabilities, despite its stated benign purpose. Firstly, it instructs the agent to install a global npm package (`npm install -g npkill`), which grants broad system permissions and introduces a supply chain risk if the package itself were compromised. Secondly, it provides commands for automated deletion of files (`npkill --delete-all --yes`), a powerful and potentially destructive capability that, even with warnings in SKILL.md, could lead to unintended data loss if the agent misinterprets instructions or operates without sufficient oversight.