check_package

9 registry entries were observed exposing a tool named check_package — none of them flagged as a privileged capability.

Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 12,346 of 40,589 scannable entries (30%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.

1. pkgtruthMCPattestedtrust 85/100 · A

   v0.2.2

   ↓ 52/wk

   ★ 4

   Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

   ClaudeCursorCopilotGemini

   io.github.hxckyaMIT1mo agonpmGitHub+compareobserved 2026-09-11 · static extraction

   mcp
2. @dir-ai/voyagerMCPattestedtrust 65/100 · B

   v1.4.0

   Cited, OSV-gated, injection-hardened web briefs for coding agents. Verified, never raw web.

   ClaudeCursorCopilotGemini

   io.github.dir-aiUnknown2mo agonpmGitHub+compareobserved 2026-08-15 · static extraction

   mcp
3. io.github.sinewaveai/agent-security-scanner-mcpMCPcommunitytrust 60/100 · B

   v2.0.1

   ★ 121

   Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

   ClaudeCursorCopilotGemini

   io.github.sinewaveaiUnknown8mo agonpmGitHub+compareobserved 2026-06-13 · static extraction

   mcp
4. safeinstall-cliMCPcommunitytrust 60/100 · B

   v0.12.0

   ↓ 796/wk

   Local-first CLI that blocks risky npm, pnpm, and bun installs before they run. Open source.

   ClaudeCursorCopilotGemini

   UnknownMIT3mo agonpmGitHub+compareobserved 2026-07-19 · static extraction

   securitysupply-chainnpmpnpmbuncli
5. savesavesavesaveMCPcommunitytrust 60/100 · B

   v0.1.3

   ↓ 552/wk

   Check messages, npm packages and crypto addresses before acting. Read-only scanner tools.

   ClaudeCursorCopilotGemini

   io.github.stefantsezarovAGPL-3.0-only11d agonpmGitHub+compareobserved 2026-10-04 · static extraction

   mcp
6. @guardbee/mcp-slopsquat-scannerMCPcommunitytrust 60/100 · B

   v0.1.1

   ↓ 57/wk

   ★ 1

   Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

   ClaudeCursorCopilotGemini

   io.github.4hmetuyarMIT14d agonpmGitHub+compareobserved 2026-10-11 · static extraction

   mcp
7. @liminallablibs/agent-guard-mcpMCPcommunitytrust 60/100 · B

   v0.2.1

   Verify-before-act safety checks for AI agents: packages, lockfiles, manifests, CI workflows.

   ClaudeCursorCopilotGemini

   io.github.liminalpepeUnknown3mo agonpmGitHub+compareobserved 2026-08-12 · static extraction

   mcp
8. dev.depscope/mcpMCPcommunitydegradedtrust 60/100 · B

   v0.9.24

   Package intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.

   ClaudeCursorCopilotChatGPTGemini

   dev.depscopeUnknown5mo agonpmGitHub+compareobserved 2026-06-13 · static extraction

   mcp
9. driftwatch-mcpMCPcommunitytrust 60/100 · B

   v0.1.2

   What broke between two dependency versions, with a citation for every claim. No API key needed.

   ClaudeCursorCopilotGemini

   io.github.dhughes6071Unknown1mo agonpmGitHub+compareobserved 2026-09-14 · static extraction

   mcp

All indexed toolsSearch the registry for check_package