portaljs

Guides for using ai agents skills like portaljs.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 7/8/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@adobe/css-tools: @adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/core: @babel/core: Arbitrary File Read via sourceMappingURL Comment",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@babel/helpers: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/traverse: Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "@changesets/cli: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@microsoft/api-extractor: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@microsoft/api-extractor-model: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@microsoft/tsdoc-config: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@rushstack/node-core-library: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "ajv: ajv has ReDoS when using `$data` option",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "dompurify: DOMPurify allows tampering by prototype pollution",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "external-editor: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "get-func-name: Chaijs/get-func-name vulnerable to ReDoS",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "giget: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "glob: glob CLI: Command injection via -c/--cmd executes matches with shell:true",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "immutable: Immutable is vulnerable to Prototype Pollution",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "lodash: lodash vulnerable to Code Injection via `_.template` imports key names",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "lodash-es: lodash vulnerable to Code Injection via `_.template` imports key names",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "mermaid: Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "mocha: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "nanoid: Predictable results in nanoid generation when given non-integer values",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "next: Next.js missing cache-control header may lead to CDN caching empty reply",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS line return parsing error",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "semver: semver vulnerable to Regular Expression Denial of Service",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tmp: tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "validator: validator.js has a URL validation bypass vulnerability in its isURL function",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "vite: Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "word-wrap: word-wrap vulnerable to Regular Expression Denial of Service",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
      "severity": "medium"
    },
    {
      "file": "README.md",
      "line": 44,
      "type": "remote-install",
      "message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://raw.githubusercontent.com/datopian/portaljs/main/scripts/inst\"",
      "severity": "low"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-07-08T06:27:34.292Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}