Enterprise DNAEnterprise DNA
MMCP ServersDeveloperlow

askalf/truecopy

by Various

own your agent skills — vet, sign & pin every skill & MCP server before it runs, then fail the build when the bytes change. 68,560 skills audited across two ecosystems; daily watch

Visit siteSubmit your build →

MCP

askalf/truecopy

Added 3 Sept 2026

#agent-security#ai-agents#claude-code#mcp#own-your-stack#prompt-injection#provenance#security
Catalogue record, not a reviewed recommendation. This record can include automatically collected descriptions and setup details. Confirm important claims with the original source. Explore source-reviewed tools.

Overview

Own your agent skills by vetting, signing, and pinning every skill and MCP server before it runs. Fails the build when the bytes change. Has audited 68,560 skills across two ecosystems and watches the official Claude Code plugin directory daily.

Best for

Best for
Teams needing strict supply-chain control over agent skills and MCP servers.

Use cases

  • Pin agent skills to verified versions before deployment
  • Fail builds when skill or MCP server bytes change
  • Audit skills against the official Claude Code plugin directory

How to use

Install

npm i -g @askalf/truecopy                # latest, from npm

Tools exposed

  • truecopy-verify
  • truecopy-status

Clients listed in this record (not verified here)

Claude Code

Notes

1 stars on GitHub. Last updated 2026-09-02. Licensed MIT.

Pros

  • Broad audit coverage: 68,560 skills across two ecosystems
  • Daily monitoring of the official Claude Code plugin directory
  • Enforces integrity through signing and build failure

Cons

  • Very low community adoption (1 star)
  • Vendor is listed as Various, so maintenance is unclear
  • Requires build pipeline integration to enforce checks
Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.

← Back to MCP ServersSubmit your own entry →