by sametcelikbicak · MCP Server · ★ 75
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
npm install -g rolecraft
npx rolecraft install <source>
Taken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 75 |
| Forks | 13 |
| Language | JavaScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 73/100 |
| Open Issues | 9 |
| Last Updated | 2026-07-20 |
| Created | 2026-06-12 |
| Platforms | claude-code, cli, gemini, mcp, node |
| Est. Tokens | ~14k |
RoleCraft — Simple Skill Installer for AI Zero-dependency CLI to install AI agent skills as roles & behaviors from any source. No marketplace, no registry, no signup — just point it at a local folder or a GitHub repo and it works. Works with opencode, claude-code, cursor, and all spec-compliant agents. Why rolecraft? | GitHub repo instal
Looking for a rolecraft alternative? If you're comparing rolecraft with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The security-first skill manager for AI agents — every install runs a security scan. Manage skills & MCP serve
Postman MCP Server — connect AI agents (Claude Code, Cursor, VS Code Copilot, Gemini CLI) to your Postman coll
Sync MCP servers, Skills, Agents & Commands across Claude Code, Cursor, OpenCode, Codex. One config, all tools
A CLI tool to provide LLM context for coding projects by combining project files into a single text file (or c
The hivemind for AI coding agents — persistent team context recorded once and recalled across agents, machines
Connect RStudio to Claude Code, Codex, Gemini, and other LLM agents via MCP. Multi-agent orchestration, automa
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: