Graphorin API reference v0.7.0
Graphorin API reference / @graphorin/security / / InstallSkillFromNpmOptions
Interface: InstallSkillFromNpmOptions
Defined in: packages/security/src/supply-chain/installer.ts:48
Options accepted by installSkillFromNpm.
Stable
Properties
| Property | Modifier | Type | Description | Defined in |
|---|---|---|---|---|
actor? | readonly | SupplyChainAuditActor | Override actor recorded in the audit event. | packages/security/src/supply-chain/installer.ts:70 |
cwd? | readonly | string | Where to install the package. Defaults to a fresh temp dir. | packages/security/src/supply-chain/installer.ts:60 |
dryRun? | readonly | boolean | Skip the actual install; runs the policy + audit pipeline only. | packages/security/src/supply-chain/installer.ts:66 |
env? | readonly | ProcessEnv | Forwarded to the package-manager runner. | packages/security/src/supply-chain/installer.ts:62 |
packageName | readonly | string | - | packages/security/src/supply-chain/installer.ts:49 |
policy? | readonly | SupplyChainPolicy | - | packages/security/src/supply-chain/installer.ts:52 |
signal? | readonly | AbortSignal | Cancellation. | packages/security/src/supply-chain/installer.ts:64 |
skillMd? | readonly | string | Optional pre-fetched SKILL.md content for offline verification. | packages/security/src/supply-chain/installer.ts:68 |
trustLevel? | readonly | SkillTrustLevel | - | packages/security/src/supply-chain/installer.ts:51 |
trustRoot? | readonly | SkillTrustRoot | Operator trust root (D4 / security-01) threaded into signature verification: a valid signature from a key not in the root is rejected. See SkillTrustRoot. | packages/security/src/supply-chain/installer.ts:58 |
version? | readonly | string | - | packages/security/src/supply-chain/installer.ts:50 |