VS Code extension for installing, managing, and discovering AI agent skills with security-first approach
This is a VS Code extension, not an MCP server. The source shows only package.json command definitions with minimal descriptions (10-20 chars each) and NO visible input schemas, parameter types, or output documentation. Tools are registered as VS Code commands, not MCP tools with proper schemas. No evidence of MCP protocol implementation in the provided code. Tool descriptions like 'Install Skill', 'Search Skills', 'Doctor' are far too generic and lack context for LLM selection. No parameter documentation visible. This cannot be evaluated as an MCP server.
Doctor
Init New Skill
Install Skill
List Skills
Install MCP Server
Remove MCP Server
Apply Profile
Delete Profile
No input schemas visible for any tool. All 12 tools have schema score of 0. Cannot verify parameter types, constraints, or documentation.
Tool descriptions are 10-20 characters, far below the 50-200 char baseline for LLM-optimized descriptions. Examples: 'Install Skill', 'Search Skills', 'Doctor'. Descriptions lack context for when/why to use each tool.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 18 | 2026-07-28+ | v2 |
Save Profile
Remove Skill
Search Skills
Test Skill
No output schemas documented. Cannot verify what fields tools return or what data is available for downstream tool chaining.
Destructive tools (rolecraft.remove, rolecraft.mcp.remove, rolecraft.profile.delete) lack confirmation/dry-run patterns. No evidence of permission gates or audit logging.
Source code provided is incomplete (doctor.ts truncated). Cannot verify error handling, parameter validation, or recovery guidance for any tool.