acidtest 0.1.2 → 0.2.0

package/README.md

@@ -1,17 +1,25 @@
 # AcidTest
 
-Security scanner for AI agent skills. Scan before you install.
+Security scanner for AI agent skills and MCP servers. Scan before you install.
 
 ## The Problem
 
-The AgentSkills ecosystem has 66,000+ skills. Recent audits found:
-- **26%** contain at least one vulnerability
+The AI agent ecosystem is growing rapidly with thousands of skills and MCP servers. Security concerns include:
+- **AgentSkills**: 66,000+ skills with 26% containing vulnerabilities
 - **230+** confirmed malicious skills uploaded to ClawHub in one week
 - **341** skills flagged in the ClawHavoc campaign
+- **MCP Servers**: New ecosystem with similar security risks
 
 ## Quick Start
 ```bash
+# See AcidTest in action
+npx acidtest demo
+
+# Scan an AgentSkills skill
 npx acidtest scan ./my-skill
+
+# Scan an MCP server
+npx acidtest scan ./my-mcp-server
 ```
 
 No API keys. No configuration. No Python.
@@ -48,6 +56,7 @@ RECOMMENDATION: Do not install. Prompt injection attempt detected.
 
 ## What It Detects
 
+**For AgentSkills:**
 - Prompt injection attempts
 - Undeclared network calls
 - Credential harvesting
@@ -55,9 +64,22 @@ RECOMMENDATION: Do not install. Prompt injection attempt detected.
 - Data exfiltration patterns
 - Obfuscated payloads
 
+**For MCP Servers:**
+- Dangerous command execution
+- Undeclared network access (SSE transport)
+- Environment variable credential requests
+- Shell binary access
+- Permission mismatches between manifest and code
+
 ## How It Works
 
-AcidTest runs four analysis layers: permission audit, prompt injection scan, code analysis (via TypeScript AST), and cross-reference checks that catch when code behavior doesn't match declared permissions.
+AcidTest runs four analysis layers:
+1. **Permission Audit**: Analyzes declared permissions (bins, env, tools)
+2. **Prompt Injection Scan**: Detects instruction override attempts (AgentSkills)
+3. **Code Analysis**: AST-based analysis of JavaScript/TypeScript files
+4. **Cross-Reference**: Catches code behavior not matching declared permissions
+
+Works with both SKILL.md (AgentSkills) and MCP manifests (mcp.json, server.json, package.json).
 
 ## Install
 ```bash
@@ -70,18 +92,76 @@ npx acidtest scan ./path-to-skill
 ```
 
 ## Usage
+
+### CLI Commands
 ```bash
-# Scan a skill directory
-acidtest scan ./my-skill
+# See AcidTest in action with demo fixtures
+acidtest demo
 
-# Scan a SKILL.md file directly
+# Scan an AgentSkills skill
+acidtest scan ./my-skill
 acidtest scan ./my-skill/SKILL.md
 
-# Scan all skills in a directory
-acidtest scan-all ./skills
+# Scan an MCP server
+acidtest scan ./my-mcp-server          # Auto-detects mcp.json, server.json, etc.
+acidtest scan ./server/mcp.json        # Direct manifest path
+
+# Scan all skills/servers in a directory
+acidtest scan-all ./directory
 
-# JSON output
+# JSON output for programmatic use
 acidtest scan ./my-skill --json
+
+# Start as MCP server (for AI agents)
+acidtest serve
+```
+
+### Use as MCP Server
+
+AcidTest can run as an MCP (Model Context Protocol) server, allowing AI agents like Claude to scan skills and MCP servers before installation.
+
+#### Claude Desktop Configuration
+
+Add to your `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "acidtest": {
+      "command": "npx",
+      "args": ["-y", "acidtest", "serve"]
+    }
+  }
+}
+```
+
+Or if installed globally:
+
+```json
+{
+  "mcpServers": {
+    "acidtest": {
+      "command": "acidtest",
+      "args": ["serve"]
+    }
+  }
+}
+```
+
+#### Available MCP Tools
+
+- **`scan_skill`**: Scan a single skill or MCP server
+  - Input: `{ "path": "/path/to/skill" }`
+  - Returns: Full scan result with trust score and findings
+
+- **`scan_all`**: Scan all skills/servers in a directory
+  - Input: `{ "directory": "/path/to/directory" }`
+  - Returns: Array of scan results
+
+Once configured, Claude can scan skills before installation:
+```
+User: "Can you scan this MCP server before I install it?"
+Claude: [Uses acidtest scan_skill tool to analyze the server]
 ```
 
 ## Scoring

package/dist/index.js

@@ -3,32 +3,41 @@
  * AcidTest CLI entry point
  * Parses arguments and routes to appropriate commands
  */
-import { scanSkill, scanAllSkills } from './scanner.js';
-import { reportToTerminal, reportAsJSON } from './reporter.js';
-const VERSION = '0.1.2';
+import { scanSkill, scanAllSkills } from "./scanner.js";
+import { reportToTerminal, reportAsJSON } from "./reporter.js";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+import { spawn } from "child_process";
+const VERSION = "0.2.0";
 /**
  * Main CLI function
  */
 async function main() {
     const args = process.argv.slice(2);
     // Handle --version flag
-    if (args.includes('--version') || args.includes('-v')) {
+    if (args.includes("--version") || args.includes("-v")) {
         console.log(`acidtest v${VERSION}`);
         process.exit(0);
     }
     // Handle --help flag
-    if (args.includes('--help') || args.includes('-h') || args.length === 0) {
+    if (args.includes("--help") || args.includes("-h") || args.length === 0) {
         printHelp();
         process.exit(0);
     }
     // Parse command
     const command = args[0];
-    if (command === 'scan') {
+    if (command === "scan") {
         await handleScan(args.slice(1));
     }
-    else if (command === 'scan-all') {
+    else if (command === "scan-all") {
         await handleScanAll(args.slice(1));
     }
+    else if (command === "demo") {
+        await handleDemo(args.slice(1));
+    }
+    else if (command === "serve") {
+        await handleServe(args.slice(1));
+    }
     else {
         console.error(`Unknown command: ${command}`);
         console.error('Run "acidtest --help" for usage information.');
@@ -40,11 +49,11 @@ async function main() {
  */
 async function handleScan(args) {
     // Parse flags
-    const jsonOutput = args.includes('--json');
-    const paths = args.filter(arg => !arg.startsWith('--'));
+    const jsonOutput = args.includes("--json");
+    const paths = args.filter((arg) => !arg.startsWith("--"));
     if (paths.length === 0) {
-        console.error('Error: No skill path provided');
-        console.error('Usage: acidtest scan <path-to-skill> [--json]');
+        console.error("Error: No skill path provided");
+        console.error("Usage: acidtest scan <path-to-skill> [--json]");
         process.exit(1);
     }
     const skillPath = paths[0];
@@ -57,12 +66,12 @@ async function handleScan(args) {
             reportToTerminal(result);
         }
         // Exit with non-zero code for FAIL or DANGER
-        if (result.status === 'FAIL' || result.status === 'DANGER') {
+        if (result.status === "FAIL" || result.status === "DANGER") {
             process.exit(1);
         }
     }
     catch (error) {
-        console.error('Error scanning skill:', error.message);
+        console.error("Error scanning skill:", error.message);
         process.exit(1);
     }
 }
@@ -71,18 +80,18 @@ async function handleScan(args) {
  */
 async function handleScanAll(args) {
     // Parse flags
-    const jsonOutput = args.includes('--json');
-    const paths = args.filter(arg => !arg.startsWith('--'));
+    const jsonOutput = args.includes("--json");
+    const paths = args.filter((arg) => !arg.startsWith("--"));
     if (paths.length === 0) {
-        console.error('Error: No directory path provided');
-        console.error('Usage: acidtest scan-all <directory> [--json]');
+        console.error("Error: No directory path provided");
+        console.error("Usage: acidtest scan-all <directory> [--json]");
         process.exit(1);
     }
     const directory = paths[0];
     try {
         const results = await scanAllSkills(directory);
         if (results.length === 0) {
-            console.log('No skills found in directory');
+            console.log("No skills found in directory");
             process.exit(0);
         }
         if (jsonOutput) {
@@ -95,16 +104,16 @@ async function handleScanAll(args) {
                 reportToTerminal(result);
                 // Add separator between skills (except for last one)
                 if (i < results.length - 1) {
-                    console.log('\n' + '='.repeat(60) + '\n');
+                    console.log("\n" + "=".repeat(60) + "\n");
                 }
             }
             // Print summary statistics
-            console.log('\n' + '='.repeat(60));
+            console.log("\n" + "=".repeat(60));
             console.log(`\nScanned ${results.length} skill(s):\n`);
-            const pass = results.filter(r => r.status === 'PASS').length;
-            const warn = results.filter(r => r.status === 'WARN').length;
-            const fail = results.filter(r => r.status === 'FAIL').length;
-            const danger = results.filter(r => r.status === 'DANGER').length;
+            const pass = results.filter((r) => r.status === "PASS").length;
+            const warn = results.filter((r) => r.status === "WARN").length;
+            const fail = results.filter((r) => r.status === "FAIL").length;
+            const danger = results.filter((r) => r.status === "DANGER").length;
             if (pass > 0)
                 console.log(`  PASS:   ${pass}`);
             if (warn > 0)
@@ -116,33 +125,126 @@ async function handleScanAll(args) {
             console.log();
         }
         // Exit with non-zero if any skill failed
-        const hasFailures = results.some(r => r.status === 'FAIL' || r.status === 'DANGER');
+        const hasFailures = results.some((r) => r.status === "FAIL" || r.status === "DANGER");
         if (hasFailures) {
             process.exit(1);
         }
     }
     catch (error) {
-        console.error('Error scanning directory:', error.message);
+        console.error("Error scanning directory:", error.message);
         process.exit(1);
     }
 }
+/**
+ * Handle 'demo' command
+ * Runs built-in test fixtures to show the full output spectrum
+ */
+async function handleDemo(args) {
+    console.log("AcidTest Demo - Running built-in test fixtures...\n");
+    // Find fixtures directory relative to this file
+    const __filename = fileURLToPath(import.meta.url);
+    const __dirname = dirname(__filename);
+    const fixturesDir = join(__dirname, "..", "test-fixtures");
+    const fixtures = [
+        { name: "PASS", path: join(fixturesDir, "fixture-pass") },
+        { name: "WARN", path: join(fixturesDir, "fixture-warn") },
+        { name: "FAIL", path: join(fixturesDir, "fixture-fail") },
+        { name: "DANGER", path: join(fixturesDir, "fixture-danger") },
+    ];
+    const results = [];
+    for (let i = 0; i < fixtures.length; i++) {
+        const fixture = fixtures[i];
+        try {
+            const result = await scanSkill(fixture.path);
+            results.push({ fixture: fixture.name, result });
+            console.log(`[${fixture.name} Example]`);
+            reportToTerminal(result);
+            if (i < fixtures.length - 1) {
+                console.log("\n" + "─".repeat(60) + "\n");
+            }
+        }
+        catch (error) {
+            console.warn(`Warning: Could not scan ${fixture.name} fixture:`, error.message);
+        }
+    }
+    // Print summary
+    console.log("\n" + "=".repeat(60));
+    console.log("\nDemo Summary:");
+    console.log("AcidTest provides four security levels based on trust score (0-100):\n");
+    for (const { fixture, result } of results) {
+        const statusColor = result.status === "PASS"
+            ? "green"
+            : result.status === "WARN"
+                ? "yellow"
+                : result.status === "FAIL"
+                    ? "red"
+                    : "red";
+        console.log(`  ${result.status.padEnd(6)} (${result.score}/100) - ${getStatusDescription(result.status)}`);
+    }
+    console.log("\nRun 'acidtest scan <path>' to scan your own skills and tools.");
+    console.log("For more information, visit: https://acidtest.dev\n");
+}
+/**
+ * Get status description for demo summary
+ */
+function getStatusDescription(status) {
+    switch (status) {
+        case "PASS":
+            return "Safe to use, no significant security concerns";
+        case "WARN":
+            return "Review findings before use, minor concerns";
+        case "FAIL":
+            return "Not recommended, significant security issues";
+        case "DANGER":
+            return "Do not use, critical security vulnerabilities";
+        default:
+            return "Unknown status";
+    }
+}
+/**
+ * Handle 'serve' command
+ * Starts AcidTest as an MCP server
+ */
+async function handleServe(args) {
+    // Find the mcp-server.js file relative to this file
+    const __filename = fileURLToPath(import.meta.url);
+    const __dirname = dirname(__filename);
+    const mcpServerPath = join(__dirname, "mcp-server.js");
+    // Start the MCP server as a child process
+    const mcpServer = spawn("node", [mcpServerPath], {
+        stdio: "inherit", // Inherit stdin/stdout/stderr for MCP protocol
+    });
+    // Handle process termination
+    mcpServer.on("exit", (code) => {
+        process.exit(code || 0);
+    });
+    // Handle errors
+    mcpServer.on("error", (error) => {
+        console.error("Failed to start MCP server:", error.message);
+        process.exit(1);
+    });
+}
 /**
  * Print help text
  */
 function printHelp() {
     console.log(`
 AcidTest v${VERSION}
-Security scanner for AI agent skills
+Security scanner for AI agent skills and MCP servers
 
 USAGE:
-  acidtest scan <path-to-skill> [--json]
+  acidtest scan <path> [--json]
   acidtest scan-all <directory> [--json]
+  acidtest demo
+  acidtest serve
   acidtest --version
   acidtest --help
 
 COMMANDS:
-  scan          Scan a single skill directory or SKILL.md file
-  scan-all      Recursively scan all skills in a directory
+  scan          Scan a single skill/MCP server (SKILL.md, mcp.json, etc.)
+  scan-all      Recursively scan all skills/servers in a directory
+  demo          Run demo with built-in test fixtures
+  serve         Start AcidTest as an MCP server for AI agents
 
 OPTIONS:
   --json        Output results as JSON
@@ -150,21 +252,30 @@ OPTIONS:
   --help        Show this help message
 
 EXAMPLES:
-  # Scan a single skill
+  # See AcidTest in action with demo fixtures
+  acidtest demo
+
+  # Scan an AgentSkills skill
   acidtest scan ./my-skill
 
+  # Scan an MCP server
+  acidtest scan ./my-mcp-server
+
   # Scan with JSON output
   acidtest scan ./my-skill --json
 
-  # Scan all skills in a directory
-  acidtest scan-all ./skills-directory
+  # Scan all skills/servers in a directory
+  acidtest scan-all ./directory
+
+  # Start as MCP server (for use with Claude Desktop, etc.)
+  acidtest serve
 
 For more information, visit: https://acidtest.dev
 `);
 }
 // Run CLI
-main().catch(error => {
-    console.error('Unexpected error:', error);
+main().catch((error) => {
+    console.error("Unexpected error:", error);
     process.exit(1);
 });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE/D,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,wBAAwB;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAExB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAE1C,IAAI,UAAU,EAAE,CAAC;YACf,YAAY,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,6CAA6C;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,+BAA+B;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1B,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAEzB,qDAAqD;gBACrD,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC;YAEvD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;YAEjE,IAAI,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;YAEnD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAClD,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;YACF,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BlB,CAAC,CAAC;AACH,CAAC;AAED,UAAU;AACV,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,wBAAwB;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAExB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAE1C,IAAI,UAAU,EAAE,CAAC;YACf,YAAY,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,6CAA6C;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,+BAA+B;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1B,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAEzB,qDAAqD;gBACrD,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC;YAEvD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;YAEnE,IAAI,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;YAEnD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACpD,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IAEnE,gDAAgD;IAChD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG;QACf,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE;QACzD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE;QACzD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE;QACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;KAC9D,CAAC;IAEF,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAEhD,OAAO,CAAC,GAAG,CAAC,IAAK,OAAO,CAAC,IAAK,WAAW,CAAC,CAAC;YAC3C,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAEzB,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,2BAA2B,OAAO,CAAC,IAAI,WAAW,EACjD,KAAe,CAAC,OAAO,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CACT,wEAAwE,CACzE,CAAC;IAEF,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1C,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,KAAK,MAAM;YACtB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM;gBACxB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM;oBACxB,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,KAAK,CAAC;QAEhB,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,WAAW,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAc;IAC1C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,+CAA+C,CAAC;QACzD,KAAK,MAAM;YACT,OAAO,4CAA4C,CAAC;QACtD,KAAK,MAAM;YACT,OAAO,8CAA8C,CAAC;QACxD,KAAK,QAAQ;YACX,OAAO,+CAA+C,CAAC;QACzD;YACE,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,IAAc;IACvC,oDAAoD;IACpD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAEvD,0CAA0C;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE;QAC/C,KAAK,EAAE,SAAS,EAAE,+CAA+C;KAClE,CAAC,CAAC;IAEH,6BAA6B;IAC7B,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,gBAAgB;IAChB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9B,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;YACF,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0ClB,CAAC,CAAC;AACH,CAAC;AAED,UAAU;AACV,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/loaders/mcp-loader.d.ts

@@ -0,0 +1,28 @@
+/**
+ * MCP server manifest loader
+ * Detects and parses MCP server configuration files
+ */
+import type { SkillMetadata } from "../types.js";
+/**
+ * MCP manifest format types
+ */
+export type MCPManifestFormat = "mcp.json" | "server.json" | "package.json" | "claude_desktop_config.json";
+/**
+ * Detected MCP manifest
+ */
+export interface MCPManifest {
+    format: MCPManifestFormat;
+    path: string;
+    metadata: SkillMetadata;
+    rawConfig: any;
+}
+/**
+ * Detect if a directory contains an MCP server manifest
+ * Returns the path to the manifest if found, otherwise null
+ */
+export declare function detectMCPManifest(directory: string): string | null;
+/**
+ * Parse an MCP manifest file
+ */
+export declare function parseMCPManifest(manifestPath: string): MCPManifest;
+//# sourceMappingURL=mcp-loader.d.ts.map

package/dist/loaders/mcp-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-loader.d.ts","sourceRoot":"","sources":["../../src/loaders/mcp-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,aAAa,GACb,cAAc,GACd,4BAA4B,CAAC;AAEjC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6BlE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,CAwBlE"}