1. Conduid
  2. Social
  3. Pkgxray
MCP server · Social

Pkgxray

· github.com/adamsjack711-ux/pkgxray

Supply-chain security for AI agents, npm packages, and MCP servers. Analyze packages before you install them — zero-dep Node, runs locally, never executes untrusted code.

Unclaimed ai-agentsclidevsecopsmcpmodel-context-protocolnodejsnpmprompt-injectionsecuritystatic-analysissupply-chainsupply-chain-security
InstallView source
34Low

Scored 3 months ago · breakdown

About Pkgxray

Pkgxray is an MCP server in the Social category: supply-chain security for AI agents, npm packages, and MCP servers. Analyze packages before you install them — zero-dep Node, runs locally, never executes untrusted code.

Install

From source
git clone https://github.com/adamsjack711-ux/pkgxray

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Pkgxray

Powered by Claude · Grounded in docs

I know everything about Pkgxray. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Pkgxray

How do I install Pkgxray?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Pkgxray safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Pkgxray still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.