feat: ship as npm package via @netresearch/agent-skill-coordinator

README.md

@@ -41,6 +41,26 @@ Installed automatically via the Netresearch marketplace.
 composer require --dev netresearch/github-release-skill
 ```
 
+### npm (Node Projects)
+
+```bash
+npm install --save-dev \
+  @netresearch/agent-skill-coordinator \
+  github:netresearch/github-release-skill
+```
+
+Requires [@netresearch/agent-skill-coordinator](https://github.com/netresearch/node-agent-skill-coordinator), which discovers the skill in `node_modules` and registers it in `AGENTS.md` via a `postinstall` hook. For pnpm, also allowlist the coordinator's postinstall:
+
+```json
+{
+  "pnpm": {
+    "onlyBuiltDependencies": ["@netresearch/agent-skill-coordinator"]
+  }
+}
+```
+
+> **Limitation:** This installation method only registers the skill's `SKILL.md` content (procedural knowledge that the agent reads). The slash commands (`/release`, `/release-prepare`, `/release-status`) and the PreToolUse guard hooks defined in `.claude-plugin/` are **not** loaded by Claude Code when the skill is installed via npm — those require Claude Code's plugin mechanism. To get the full skill (slash commands + guard hooks + procedural knowledge), install via the [Claude Code Marketplace](#claude-code-marketplace-recommended) instead.
+
 ### Manual
 
 Download the latest release and extract to `~/.claude/plugins/`.

package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@netresearch/github-release-skill",
+  "version": "0.0.0-source",
+  "description": "Claude Code skill for safe GitHub releases with supply chain security.",
+  "license": "(MIT AND CC-BY-SA-4.0)",
+  "author": "Netresearch DTT GmbH (https://www.netresearch.de/)",
+  "homepage": "https://github.com/netresearch/github-release-skill",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/netresearch/github-release-skill.git"
+  },
+  "bugs": {
+    "url": "https://github.com/netresearch/github-release-skill/issues"
+  },
+  "keywords": [
+    "ai-agent-skill",
+    "github-release",
+    "supply-chain-security",
+    "slsa",
+    "release-management",
+    "anthropic",
+    "claude-code"
+  ],
+  "aiAgentSkill": "skills/github-release/SKILL.md",
+  "files": [
+    "skills/github-release/",
+    "hooks/",
+    "LICENSE-MIT",
+    "LICENSE-CC-BY-SA-4.0",
+    "README.md"
+  ],
+  "peerDependencies": {
+    "@netresearch/agent-skill-coordinator": "^0.1"
+  }
+}