token-monitor

Guides for using ai agents skills like token-monitor.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 6/17/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@jimp/core: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@jimp/custom: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "electron-icon-builder: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "file-type: file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "form-data: form-data uses unsafe random function in form-data for choosing boundary",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "icon-gen: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "jimp: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "phantomjs-prebuilt: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "phin: phin may include sensitive headers in subsequent requests after redirect",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "qs: qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "request: Server-Side Request Forgery in Request",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "svg2png: XSS in svg2png (NPM package)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "tar: node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "tmp: tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tough-cookie: tough-cookie Prototype Pollution vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ws: ws: Memory exhaustion DoS from tiny fragments and data chunks",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "yargs: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "yargs-parser: yargs-parser Vulnerable to Prototype Pollution",
      "severity": "medium"
    },
    {
      "file": "README.md",
      "line": 37,
      "type": "dangerous-command",
      "message": "Dangerous command (writes to Claude config): \"> | Claude Code | `~/.claude/projects/`, `~/.claude/\"",
      "severity": "medium"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-06-17T09:02:18.223Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}