askalf/truecopy

Overview

Own your agent skills by vetting, signing, and pinning every skill and MCP server before it runs. Fails the build when the bytes change. Has audited 68,560 skills across two ecosystems and watches the official Claude Code plugin directory daily.

Best for

Best for
Teams needing strict supply-chain control over agent skills and MCP servers.

Use cases

• Pin agent skills to verified versions before deployment
• Fail builds when skill or MCP server bytes change
• Audit skills against the official Claude Code plugin directory

Notes

Own your agent skills by vetting, signing, and pinning every skill and MCP server before it runs. Fails the build when the bytes change. Has audited 68,560 skills across two ecosystems and watches the official Claude Code plugin directory daily.

1 stars on GitHub. Last updated 2026-09-02. Licensed MIT.

Use cases

• Pin agent skills to verified versions before deployment
• Fail builds when skill or MCP server bytes change
• Audit skills against the official Claude Code plugin directory

Pros

• Broad audit coverage: 68,560 skills across two ecosystems
• Daily monitoring of the official Claude Code plugin directory
• Enforces integrity through signing and build failure

Cons

• Very low community adoption (1 star)
• Vendor is listed as Various, so maintenance is unclear
• Requires build pipeline integration to enforce checks

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.