加载中…
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
io.github.hxckya/pkgtruth 是 ChatHome Skills 收录的 MCP 条目，来源为 Official MCP Registry，质量分 73/100。 作为 Model Context Protocol 服务器，它向 Claude、Cursor、Copilot 等兼容 MCP 的 LLM 客户端暴露可直接调用的工具，让 agent 的能力超出模型内置范围。 该条目由 ChatHome Skills 的每日抓取从官方 registry 和 GitHub 发现查询中收录，每次运行都会重新核验仓库事实、新鲜度信号和安装元数据。 质量分综合了官方 registry 收录情况、可用安装命令、许可证完整性、仓库活跃度和 GitHub star 趋势，完整算法说明见来源页。安装命令已列于上方，可直接复制使用。 在将 io.github.hxckya/pkgtruth 加入生产 agent 工作流前，请核对上方的最近更新日期和仓库状态——下方事实快照是最近一次抓取的时点值。
npx -y pkgtruth@0.2.2运行此命令前，请先核对上游源码。
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-09-10T06:24:23.807095Z",
"publishedAt": "2026-09-10T06:24:23.807095Z",
"statusChangedAt": "2026-09-10T06:24:23.807095Z"
}
},
"server": {
"name": "io.github.hxckya/pkgtruth",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.2.2",
"packages": [
{
"version": "0.2.2",
"transport": {
"type": "stdio"
},
"identifier": "pkgtruth",
"registryType": "npm",
"environmentVariables": [
{
"name": "PKGTRUTH_REGISTRY",
"format": "string",
"description": "Alternate npm registry to verify against. Defaults to https://registry.npmjs.org."
},
{
"name": "PKGTRUTH_DOWNLOADS_API",
"format": "string",
"description": "Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org."
},
{
"name": "PKGTRUTH_CACHE_DIR",
"format": "string",
"description": "Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth."
},
{
"name": "PKGTRUTH_TIMEOUT_MS",
"format": "number",
"description": "Per-request timeout in milliseconds. Defaults to 8000."
}
]
}
],
"repository": {
"url": "https://github.com/hxckya/pkgtruth",
"source": "github"
},
"description": "Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them."
}
}