# Rolecraft > Zero-dependency CLI that installs AI agent skills + MCP servers from any source. 86+ agents. No signup, no telemetry, 4 KB. - **Type:** MCP server - **Install:** `agentstack add mcp-rolecraft-sh-rolecraft` - **Verified:** Pending review - **Seller:** [rolecraft-sh](https://agentstack.voostack.com/s/rolecraft-sh) - **Installs:** 0 - **Category:** [Integrations](https://agentstack.voostack.com/c/integrations) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [rolecraft-sh](https://github.com/rolecraft-sh) - **Source:** https://github.com/rolecraft-sh/rolecraft - **Website:** https://rolecraft-sh.github.io/rolecraft/ ## Install ```sh agentstack add mcp-rolecraft-sh-rolecraft ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About RoleCraft Install AI agent skills as roles & behaviors — from any source. Zero-dependency CLI · MCP + Skills in one command · 86+ agents · No signup Works with 82+ AI agents: opencode · claude-code · cursor · windsurf · devin · codex · copilot · aider · cline · gemini-cli · cody · continue · warp · codeium · fabric · goose · tabnine · supermaven · pr-pilot · loom · roo · trae · hermes · kiro · augment · kilo · openhands · junie · factory · command-code · cortex · mistral-vibe · qwen-code · openclaw · codebuddy · mux · pi · autohand-code · rovo · firebender · bob · aider-desk · and more Quick Start · Features · Commands · Comparison · FAQ · Security · Contribute --- ⚡ Zero dependencies · 📦 4 KB · 🤖 86+ agents · 🔌 Skills + MCP · 🔒 No telemetry · 🌐 Offline-first · 🔧 Any source Full benchmark results →    Full feature comparison →    Migrate from Vercel skills → --- ## Quick start ```bash # try without installing npx rolecraft --help # or install globally (works with npm, pnpm, yarn, bun) npm install -g rolecraft # detect all agents + install a skill to every agent rolecraft setup user/repo # install a skill (local, GitHub, GitLab, SSH, npm) rolecraft install ./my-skill --cursor # install a skill WITH its MCP servers (declared in SKILL.md) rolecraft install ./postgres-rules --cursor # manage MCP servers standalone rolecraft mcp install npm:@modelcontextprotocol/github --cursor # manage installed skills rolecraft list rolecraft search code-review rolecraft check rolecraft remove my-skill # convert between SKILL.md and .mdc formats rolecraft convert ./my-skill rolecraft convert --help ``` **Requirements:** Node.js >= 20 · 4 KB · zero dependencies · 86+ agents · [Getting Started →](docs/guides/getting-started.md) · [Full install guide →](docs/install.md) > **Why zero dependencies?** Every dependency is a supply-chain risk. rolecraft uses only Node.js built-ins (`fs`, `path`, `crypto`, `https`) — no `node_modules` surprises. --- ## Skills + MCP in one command rolecraft is the **only CLI** that installs both agent skills and MCP servers together. A single SKILL.md can declare both a skill and its required MCP servers: ```yaml --- name: postgres-rules mcp_servers: - name: postgres source: npm:@modelcontextprotocol/postgres --- ``` ```bash # one command installs the skill AND the MCP server rolecraft install ./postgres-rules --cursor ``` No other CLI combines both. npx skills has no MCP support. ags has a separate MCP server for search only. [→ Full MCP docs](docs/mcp.md) --- ## Features - **Zero dependencies** — ~4 KB, only Node.js built-ins - **MCP + Skills in one command** — install skills and their MCP servers together. Unique. - **Any source** — local folder, GitHub/GitLab/SSH URL, npm package - **86+ agents** — opencode, claude-code, cursor, copilot, aider, devin, gemini-cli, and more - **No registry required** — no signup, no marketplace, no vendor lock-in - **Security scoring** — static analysis: detects prompt injection, command injection, obfuscated code, credential harvesting. Scores 0–100. Blocks dangerous skills - **CI-ready** — lockfile-based re-install (`rolecraft ci`), `--yes` flag, `--dry-run` - **Shell completions** — bash, zsh, fish auto-completion - **TUI search** — interactive arrow-key skill browser with preview - **System health check** — `rolecraft doctor` diagnoses agent directories, lockfiles, and skill integrity - **AGENTS.md XML generation** — `rolecraft agents-xml` generates Claude Code-compatible XML - **Profile system** — save, apply, and share multi-agent configurations --- ## CI/CD Integration Use the [rolecraft GitHub Action](https://github.com/marketplace/actions/rolecraft-action) to verify and install skills in your CI pipeline: ```yaml # .github/workflows/skills.yml - uses: rolecraft-sh/rolecraft-action@v1 with: command: ci --yes ``` See the [CI guide](docs/guides/ci.md) for more examples. --- ## Commands overview | Command | Description | Details | | --------------------------------------- | --------------------------------------------------------------------------- | ------------------------------------ | | `rolecraft init []` | Scaffold a new `SKILL.md` | [docs](docs/commands/init.md) | | `rolecraft install ` | Install a skill with security scan (local path, GitHub/GitLab/SSH URL, npm) | [docs](docs/commands/install.md) | | `rolecraft bundle ` | Install multiple skills from inline sources or file | [docs](docs/commands/bundle.md) | | `rolecraft bundle create` | Create a new bundle file | [docs](docs/commands/bundle.md) | | `rolecraft search ` | Search for skills on GitHub (TUI with `--interactive`) | [docs](docs/commands/search.md) | | `rolecraft check` | Check installed skills for available updates | [docs](docs/commands/check.md) | | `rolecraft use ` | Preview a skill's files without installing | [docs](docs/commands/use.md) | | `rolecraft completions bash\|zsh\|fish` | Generate shell completion scripts | [docs](docs/commands/completions.md) | | `rolecraft setup []` | Detect agents, optionally install a skill to all | [docs](docs/commands/setup.md) | | `rolecraft list` | Show all installed skills | [docs](docs/commands/list.md) | | `rolecraft doctor` | Run system health check | [docs](docs/commands/doctor.md) | | `rolecraft agents-xml [--write]` | Generate skills XML for AGENTS.md | [docs](docs/commands/agents-xml.md) | | `rolecraft mcp install/remove/list/search` | Install, remove, list, or search MCP servers for AI agents | [docs](docs/commands/mcp.md) | | `rolecraft profile save/apply/list` | Save, apply, and share multi-agent configuration profiles | [docs](docs/commands/profile.md) | | `rolecraft verify` | Check installed skill integrity via content hash | [docs](docs/commands/verify.md) | | `rolecraft watch []` | Watch skills for changes and auto-sync | [docs](docs/commands/watch.md) | | `rolecraft ci` | Re-install all skills from lockfile (CI mode) | [docs](docs/commands/ci.md) | | `rolecraft convert ` | Convert between SKILL.md and .mdc formats | [docs](docs/commands/convert.md) | | `rolecraft upgrade` | Upgrade rolecraft to the latest version | [docs](docs/commands/upgrade.md) | | `rolecraft remove ` | Uninstall a skill | [docs](docs/commands/remove.md) | | `rolecraft update ` | Re-install a skill to latest | [docs](docs/commands/update.md) | | `rolecraft --version` | Show version | | | `rolecraft --help` | Show full command reference | [CLI Reference](docs/reference.md) | --- ## Comparison | Feature | rolecraft | skills (Vercel) | @agentskill.sh/cli | | ------------------------------------ | ---------------- | --------------- | ------------------- | | Zero dependencies | ✅ **0** | ✅ (1 dep) | ❌ (2) | | Local path install | ✅ **1st class** | ✅ | ❌ marketplace only | | GitHub repo install | ✅ | ✅ | ❌ | | GitLab / SSH git URL | ✅ | ✅ | ❌ | | npm package source | ✅ | ✅ | ❌ | | **MCP server management** | ✅ | ❌ | ❌ | | Agent targets | **82** | 72 | 15+ | | Skills.sh listed | ✅ | ✅ | ⚠️ (registry only) | | Bundle install + create | ✅ | ❌ | ✅ (skillset only) | | Interactive TUI search + install | ✅ | ✅ | ❌ | | Security scoring (0–100) | ✅ | ✅ (Snyk) | ✅ (server + local) | | Non-interactive flag (`--yes`/`-y`) | ✅ | ✅ | ❌ | | Skill update check (`check`) | ✅ | ❌ | ❌ | | Shell completions (bash/zsh/fish) | ✅ | ❌ | ❌ | | Dry-run preview (`--dry-run`) | ✅ | ❌ | ❌ | | Interactive scope prompt | ✅ | ✅ | ❌ | | Content hash verification (`verify`) | ✅ | ✅ | ❌ | | CI-mode re-install (`ci`) | ✅ | ✅ | ❌ | | System health check (`doctor`) | ✅ | ❌ | ❌ | | Watch mode (auto-sync) | ✅ | ❌ | ❌ | | AGENTS.md XML generation | ✅ | ❌ | ❌ | | Self-upgrade command | ✅ | ❌ | ❌ | | File size | ~4 KB | ~465 KB | ~84 KB | [See full table →](docs/comparison.md) --- ## Security Every install is automatically scanned with **static analysis** that detects: | Severity | What it catches | | ------------- | ---------------------------------------------------------------------------------------------------- | | 🔴 Critical | Prompt injection, obfuscated code (base64 blobs, `eval()`), command injection (download-and-execute) | | 🟡 High | Credential harvesting patterns, sensitive file access (`~/.ssh`, `.env`) | | 🟢 Medium/Low | Missing metadata, unusual source patterns | Scores range **0–100**: - **90+** → SAFE, install proceeds - **70–89** → REVIEW, prompts for confirmation - ** Samet ÇELİKBIÇAKOwner & Maintainer 冯基魁Contributor Yurii201811Contributor Gaohar ImranContributor Ajay KrishnanContributor Benjamin AyivohContributor --- ⭐ **If rolecraft makes your AI agent workflow easier, consider [starring the repo](https://github.com/rolecraft-sh/rolecraft).** It helps others discover the project and shows that the community finds it useful. --- ## License MIT ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [rolecraft-sh](https://github.com/rolecraft-sh) - **Source:** [rolecraft-sh/rolecraft](https://github.com/rolecraft-sh/rolecraft) - **License:** MIT - **Homepage:** https://rolecraft-sh.github.io/rolecraft/ Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** yes - **Dynamic code execution:** yes *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: flagged — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-rolecraft-sh-rolecraft - Seller: https://agentstack.voostack.com/s/rolecraft-sh - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.