rolecraft: The security-first skill manager for AI agents — every install runs a security scan

by rolecraft-sh · MCP Server · ★ 97

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

Featured in: Skill & Agent Management

How to install rolecraft

npx rolecraft --help
npm install -g rolecraft

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 72/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

agentagent-skillsaiai-agentsclaude-codeclicursordeveloper-toolsdevtoolsgood-first-issue

Quick Facts

Stars97
Forks43
LanguageJavaScript
CategoryMCP Server
LicenseMIT
Quality Score72/100
Last Updated2026-11-02
Created2026-06-12
Platformsclaude-code, cli, mcp, node
Est. Tokens~15k

About rolecraft

RoleCraft The Security-First Skill Manager for AI Agents Every install runs a security scan · Skills & MCP Servers across 87 Agents (27 Verified) Zero-dependency CLI · No signup · Offline-first <a hre

Compatible Skills

These tools work well together with rolecraft for enhanced workflows:

  • rolecraft — semantic(1.00)+rare_topics+same_lang+similar_pop+shared_platform (69%)
  • yushio — semantic(0.22)+complementary+same_lang+similar_pop+shared_platform (58%)
  • learn-agent — semantic(0.21)+complementary+same_lang+similar_pop+shared_platform (57%)
  • claude-pulse — semantic(0.20)+complementary+same_lang+similar_pop+shared_platform (57%)

rolecraft alternative? Top 6 similar tools

Looking for a rolecraft alternative? If you're comparing rolecraft with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • rolecraft by sametcelikbicak · ⭐ 75

    Zero-dependency CLI that installs AI agent skills + MCP servers from any source. 86+ agents. No signup, no tel

  • agnix by agent-sh · ⭐ 471

    The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug

  • vsync by nicepkg · ⭐ 63

    Sync MCP servers, Skills, Agents & Commands across Claude Code, Cursor, OpenCode, Codex. One config, all tools

  • claude-emporium by Vvkmnn · ⭐ 82

    🏛 [UNDER CONSTRUCTION] A (roman) claude plugin marketplace

  • ai-agent-team by peterfei · ⭐ 443

    AI Agent Team-拥有24/7专业AI开发团队：产品经理、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人。一键安装，支持中英文命令，大幅提升开发效率！

  • daymon by daymonio · ⭐ 365

    Daymon puts your favorite AI to work 24/7. It schedules, remembers, and orchestrates your own virtual team. Fr

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular JavaScript Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools