1. Conduid
  2. Social
  3. io.github.hxckya/pkgtruth
MCP server · Social

io.github.hxckya/pkgtruth

· github.com/hxckya/pkgtruth

Catches hallucinated and slopsquatted npm packages before an agent installs them.

Unclaimed social
InstallView source
37Low

Scored a month ago · breakdown

About io.github.hxckya/pkgtruth

io.github.hxckya/pkgtruth is an MCP server in the Social category: catches hallucinated and slopsquatted npm packages before an agent installs them.

Install

Claude Code
claude mcp add io-github-hxckya-pkgtruth -- npx -y pkgtruth
npx
npx -y pkgtruth

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (3)

check_dependenciesAbout to write a `package.json` / `requirements.txt`

Parameters not published.

check_install_commandAbout to run `npm install …`, `npx …`, `pip install …` — hand it the exact command

Parameters not published.

check_packageAbout to add, import, or recommend one dependency (`ecosystem: "npm" \

Parameters not published.

Ask AI

✦

Ask AI about io.github.hxckya/pkgtruth

Powered by Claude · Grounded in docs

I know everything about io.github.hxckya/pkgtruth. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About io.github.hxckya/pkgtruth

How do I install io.github.hxckya/pkgtruth?

Run claude mcp add io-github-hxckya-pkgtruth -- npx -y pkgtruth, then add the server to your MCP client's configuration.

Is io.github.hxckya/pkgtruth safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.hxckya/pkgtruth still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.