1. Conduid
  2. Security
  3. Ghostimport
MCP server · Security

Ghostimport

· github.com/FGuerreir0/ghostimport

👻 Detects ghost imports — npm packages that don't exist, hallucinated by AI coding tools like Cursor, Copilot, and Claude

Unclaimed ai-safetyclaude-codeclihallucination-detectionmcp-servernodejsnpmsecurityslopsquattingsupply-chain-securitytyposquattingvibe-coding
InstallView source
34Low

Scored a month ago · breakdown

About Ghostimport

Ghostimport is an MCP server in the Security category: 👻 Detects ghost imports — npm packages that don't exist, hallucinated by AI coding tools like Cursor, Copilot, and Claude.

Install

From source
git clone https://github.com/FGuerreir0/ghostimport

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (3)

check_install_commandVet a full `npm`/`pnpm`/`yarn`/`bun` install command.

Parameters not published.

check_packagesVerify package names exist on npm. `deep` adds risk heuristics.

Parameters not published.

scan_projectAudit a whole directory.

Parameters not published.

Ask AI

✦

Ask AI about Ghostimport

Powered by Claude · Grounded in docs

I know everything about Ghostimport. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Ghostimport

How do I install Ghostimport?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Ghostimport safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Ghostimport still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.