Head to head
Pkgtruth vs SkillTotal
Same numbers we show everywhere else, lined up. Ratings come from users, the grade comes from our scanner, adoption comes from public registries.
Pkgtruth
Aio.github.hxckya/pkgtruthNo reviews yet
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
Full listingNo reviews yet
Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.
Full listingThe short version
Neither has been reviewed yet, so the comparison rests on the scan and the public usage numbers. The safety scan favours Pkgtruth (89/100 against 75).
| Pkgtruth | SkillTotal | |
|---|---|---|
| User rating | No reviews yet | No reviews yet |
| Safety grade | A89/100 | B75/100 |
| Adoption | Growing | Growing |
| GitHub stars | 4 | 3 |
| Downloads / week | 77 | 1.4k |
| Runs where | Your machine (local) | Your machine (local) |
| Gateway-ready | No | No |
| Tools | 3 | 2 |
| Write actions | — | 1 |
| Price per call | Free | Free |
| Licence | MIT | Apache-2.0 |
| Last release | 2026-09-14 | 2026-09-19 |
| Category | AI and agents | AI and agents |