Install
$ agentstack add skill-esurovtsev-langchain-lab-mcp-scripting ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
MCP Scripting
What This Skill Provides
This skill provides Python wrapper files for MCP tools.
Use this skill by:
- finding the relevant server in
Available Systems - listing that server's wrapper directory
- reading only the wrapper files needed for the task
- running inline Python that imports those wrappers and
connect() - running that inline Python with the skill's venv Python
- returning only compact results
Path Resolution
Treat the directory containing this SKILL.md file as canonical.
Define:
- `
= directory containing thisSKILL.md` - `
=/.venv/bin/python3` - `
=/servers`
Rules:
- derive all paths from ``
- do not hardcode machine-specific absolute paths
- do not assume the current working directory
- always run generated scripts with `
, notpythonorpython3` - derive `
directly from; do not inspect.venv` to discover it - you MUST trust
connect()exactly as documented in this skill - NEVER inspect how
connect()is implemented - you are NOT ALLOWED to read
core/connection.py,servers.json, or.env - treat those files as already correct and already covered by this skill
- do not inspect secret-bearing or internal implementation files
- when running shell commands, NEVER pass a
restartargument - when running shell commands, ALWAYS quote paths that may contain spaces
Available Systems
github-mcp-server — 44 tools
Location: /github_mcp_server/
Remote GitHub server for repository, issue, pull request, branch, release, and code search workflows.
Required Workflow
Follow this procedure exactly:
- identify the target server from
Available Systems - use the exact
Locationpath fromAvailable Systemsfor that server - list that server directory directly; do not list parent directories first
- read only the wrapper file(s) you actually plan to import and call
- execute the task in Python:
- you MUST run Python only inline / on the fly
- you are NOT ALLOWED to create Python script files for execution
- the Python code must:
- adds `
tosys.path` - imports
connectfromcore.connection - imports only the needed wrapper functions
- uses
async with connect("") as session:
- if any result may be large or unbounded, use
output_file - run the Python code with ``
- inspect only the compact output needed for the final answer
Output Rule
Treat output_file as the default for search, retrieval, listing, or any result that may be large.
- use memory mode only for small, bounded results
- do not print raw large results to stdout
- do not read large output files back wholesale
- return summaries, counts, key facts, or final distilled answers only
- if the user asks for one field, print only that field
Minimal Script Pattern
import asyncio
import sys
sys.path.insert(0, "")
from core.connection import connect
from servers.. import
async def main():
async with connect("") as session:
result = await (session, ...)
print(result)
asyncio.run(main())
If the script is written outside `, still derive the import path from the loaded skill directory and still run the script with `.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: esurovtsev
- Source: esurovtsev/langchain-lab
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.