Truecopy
Description
own your agent skills — vet, sign & pin every skill & MCP server before it runs, then fail the build when the bytes change. 68,560 skills audited across two ecosystems; daily watch on the official Claude Code plugin directory.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
truecopy
**Own your agent skills. Vet, sign, and pin every skill & MCP server before it runs.**
Deterministic and offline: scan → pin → verify → enforce.
[](https://www.npmjs.com/package/@askalf/truecopy) [](https://github.com/marketplace/actions/truecopy-gate-your-agent-skills) [](https://github.com/askalf/truecopy/blob/watch/WATCH.md) [](https://github.com/askalf/truecopy/actions/workflows/ci.yml) [](https://github.com/askalf/truecopy/actions/workflows/codeql.yml) [](https://scorecard.dev/viewer/?uri=github.com/askalf/truecopy) [](https://github.com/askalf/truecopy/blob/master/LICENSE) [](https://www.npmjs.com/package/@askalf/truecopy)
[Quick start](#quick-start) · [The observatory](#proven-at-ecosystem-scale) · [Runtime gate](#runtime-gate--enforce-the-lock) · [Claude Code skills](#gate-claude-code-skills) · [Signatures](#publisher-signatures--trust-who-signed-not-just-that-it-changed) · [CI](#in-ci)
$ truecopy scan demo/poisoned-mcp.json
☠ producRelated Skills
Auto Update
Pull the latest ECC repo changes and reinstall the current managed targets.
Ecc Guide
Navigate ECC's current agents, skills, commands, hooks, install profiles, and docs from the live repository su
Epic Claim
Claim an epic issue, stamp coordination state, and sync local ownership.
Epic Publish
Publish a validated epic update back to the issue and local cache.
Epic Review
Mark epic review requested, approved, or changes requested.
Epic Unblock
Sweep blocked epic issues and reopen anything whose dependencies are closed.