bld — security grade SAFE, quality 67/100

Security audit verdict: SAFE · quality 67/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by rife2 · MCP Server · ★ 318

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is bld safe to install? View the security audit →

About bld

What is bld? is a build tool that lets you write your build logic in pure Java. was created because we're not really interested in build tools. We use them because we have to, but we'd rather just get on with coding the real stuff. is designed wit

bldbuildbuild-systembuild-toolbuildtoolcompilejavamcpmcp-serverrun

Quick Facts

Stars318
Forks21
LanguageJava
CategoryMCP Server
LicenseApache-2.0
Quality Score66.9035076626494/100
Open Issues4
Last Updated2026-09-16
Created2023-05-10
Platformsjava, mcp
Est. Tokens~18k

Compatible Skills

These tools work well together with bld for enhanced workflows:

  • agent-openai-java-banking-assistant — semantic(0.19)+complementary+same_lang+similar_pop+shared_platform (57%)
  • JavaClaw — semantic(0.17)+complementary+same_lang+similar_pop+shared_platform (56%)
  • JavaClaw — semantic(0.17)+complementary+same_lang+similar_pop+shared_platform (56%)
  • xcsentinel — semantic(0.32)+complementary+rare_topics+similar_pop (51%)

bld alternative? Top 6 similar tools

Looking for a bld alternative? If you're comparing bld with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • xiaozhi-esp32-server-java by joey-zhou · ⭐ 1.4k

    小智ESP32的Java企业级管理平台,提供设备监控、音色定制、角色切换和对话记录管理的前后端及服务端一体化解决方案

  • drift by dadbodgeoff · ⭐ 785

    Codebase intelligence for AI. Detects patterns & conventions + remembers decisions across sessions. MCP server

  • tda by irockel · ⭐ 552

    TDA - Thread Dump Analyzer (for Java). Analyze your Thread Dumps with a GUI or use it as MCP Server.

  • api2mcp4j by TheEterna · ⭐ 109

    Spring Boot Starter: Auto-convert existing REST APIs (@RestController) to MCP Server with zero/low-code. Expos

  • azure-ai-travel-agents by Azure-Samples · ⭐ 482

    A robust enterprise application sample (deployed on ACA) that leverages MCP and multiple AI agents orchestrate

  • solon-ai by opensolon · ⭐ 455

    Java AI application development framework (supports LLM-tool,skill; RAG; MCP; Agent-ReAct,Team-Agent). Compati

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Java Agent Tools

Frequently Asked Questions

What is bld?

bld is Pure java build tool for developers who don't like dealing with build tools. It is categorized as a MCP Server with 318 GitHub stars.

What programming language is bld written in?

bld is primarily written in Java. It covers topics such as bld, build, build-system.

How do I install or use bld?

You can find installation instructions and usage details in the bld GitHub repository at github.com/rife2/bld. The project has 318 stars and 21 forks, indicating an active community.

What license does bld use?

bld is released under the Apache-2.0 license, making it free to use and modify according to the license terms.

What are the best alternatives to bld?

The top alternatives to bld on Agent Skills Hub include xiaozhi-esp32-server-java, drift, tda. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools