Loading…
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
io.github.hxckya/pkgtruth is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 73/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding io.github.hxckya/pkgtruth to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
npx -y pkgtruth@0.2.2Review the upstream source before running this command.
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-09-10T06:24:23.807095Z",
"publishedAt": "2026-09-10T06:24:23.807095Z",
"statusChangedAt": "2026-09-10T06:24:23.807095Z"
}
},
"server": {
"name": "io.github.hxckya/pkgtruth",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.2.2",
"packages": [
{
"version": "0.2.2",
"transport": {
"type": "stdio"
},
"identifier": "pkgtruth",
"registryType": "npm",
"environmentVariables": [
{
"name": "PKGTRUTH_REGISTRY",
"format": "string",
"description": "Alternate npm registry to verify against. Defaults to https://registry.npmjs.org."
},
{
"name": "PKGTRUTH_DOWNLOADS_API",
"format": "string",
"description": "Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org."
},
{
"name": "PKGTRUTH_CACHE_DIR",
"format": "string",
"description": "Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth."
},
{
"name": "PKGTRUTH_TIMEOUT_MS",
"format": "number",
"description": "Per-request timeout in milliseconds. Defaults to 8000."
}
]
}
],
"repository": {
"url": "https://github.com/hxckya/pkgtruth",
"source": "github"
},
"description": "Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them."
}
}