skillsmp-mcp-lite 1.0.2 → 1.0.3

package/dist/api.d.ts

@@ -2,6 +2,7 @@
  * SkillsMP API Client and Types
  */
 export declare const SKILLSMP_API_BASE = "https://skillsmp.com/api/v1";
+export declare const API_TIMEOUT_MS = 30000;
 export interface Skill {
     id: string;
     name: string;

package/dist/api.js

@@ -3,6 +3,7 @@
  */
 // API Configuration
 export const SKILLSMP_API_BASE = "https://skillsmp.com/api/v1";
+export const API_TIMEOUT_MS = 30_000;
 // API Client
 export async function makeApiRequest(endpoint, apiKey, params) {
     const url = new URL(`${SKILLSMP_API_BASE}/${endpoint}`);
@@ -13,13 +14,22 @@ export async function makeApiRequest(endpoint, apiKey, params) {
             }
         });
     }
-    const response = await fetch(url.toString(), {
-        method: "GET",
-        headers: {
-            "Authorization": `Bearer ${apiKey}`,
-            "Content-Type": "application/json"
-        }
-    });
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), API_TIMEOUT_MS);
+    let response;
+    try {
+        response = await fetch(url.toString(), {
+            method: "GET",
+            headers: {
+                "Authorization": `Bearer ${apiKey}`,
+                "Content-Type": "application/json"
+            },
+            signal: controller.signal
+        });
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
     if (!response.ok) {
         const errorData = await response.json().catch(() => ({}));
         throw new Error(errorData.error?.message ||

package/dist/index.js

@@ -1,7 +1,10 @@
 #!/usr/bin/env node
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createRequire } from "module";
 import { registerSkillsTools } from "./tools/skills.js";
+const require = createRequire(import.meta.url);
+const { version } = require("../package.json");
 /**
  * SkillsMP MCP Server
  *
@@ -20,7 +23,7 @@ if (!API_KEY) {
 // Initialize MCP Server
 const server = new McpServer({
     name: "skillsmp-mcp-server",
-    version: "1.0.0"
+    version: version
 });
 // Register skills search tools
 registerSkillsTools(server, API_KEY);

package/dist/tools/skills.js

@@ -1,8 +1,33 @@
-import { exec } from "child_process";
+import { execFile } from "child_process";
 import { promisify } from "util";
 import { makeApiRequest, handleApiError, validateSearchResponse, validateAISearchResponse } from "../api.js";
 import { KeywordSearchSchema, AISearchSchema, InstallAndReadSchema } from "../schemas.js";
-const execAsync = promisify(exec);
+const execFileAsync = promisify(execFile);
+// Timeout constants (in milliseconds)
+const TIMEOUTS = {
+    READ: 30_000,
+    INSTALL: 120_000
+};
+/**
+ * Safely extract error message from unknown error type
+ */
+function getErrorDetails(error) {
+    if (error instanceof Error) {
+        const execError = error;
+        return {
+            message: execError.message,
+            stderr: execError.stderr
+        };
+    }
+    if (typeof error === 'object' && error !== null) {
+        const e = error;
+        return {
+            message: String(e.message || 'Unknown error'),
+            stderr: typeof e.stderr === 'string' ? e.stderr : undefined
+        };
+    }
+    return { message: String(error) };
+}
 /**
  * Register SkillsMP tools on the MCP server
  */
@@ -177,13 +202,11 @@ Examples:
         }
     }, async (params) => {
         try {
-            const readCmd = `npx -y openskills read ${params.skillName}`;
+            const readArgs = ["-y", "openskills", "read", params.skillName];
             // Step 1: Check if skill already exists locally
-            let skillExists = false;
             try {
-                const { stdout } = await execAsync(readCmd, { timeout: 30000 });
+                const { stdout } = await execFileAsync("npx", readArgs, { timeout: TIMEOUTS.READ });
                 if (stdout && !stdout.includes("not found") && !stdout.includes("Error")) {
-                    skillExists = true;
                     const output = formatInstallAndReadResponse(params.repo, params.skillName, stdout, true);
                     return {
                         content: [{ type: "text", text: output }],
@@ -198,41 +221,39 @@ Examples:
             }
             catch {
                 // Skill not found locally, proceed with installation
-                skillExists = false;
             }
             // Step 2: Install if not exists
-            const installFlags = ["-y"];
+            const installArgs = ["-y", "openskills", "install", params.repo];
             if (params.global)
-                installFlags.push("--global");
+                installArgs.push("--global");
             if (params.universal)
-                installFlags.push("--universal");
-            const installCmd = `npx -y openskills install ${params.repo} ${installFlags.join(" ")}`;
+                installArgs.push("--universal");
             let installOutput;
             try {
-                const { stdout, stderr } = await execAsync(installCmd, { timeout: 120000 });
+                const { stdout, stderr } = await execFileAsync("npx", installArgs, { timeout: TIMEOUTS.INSTALL });
                 installOutput = stdout || stderr;
             }
             catch (installError) {
-                const error = installError;
+                const errorDetails = getErrorDetails(installError);
                 return {
                     content: [{
                             type: "text",
-                            text: `❌ **Installation Failed**\n\nRepository: ${params.repo}\n\nError:\n${error.stderr || error.message || "Unknown error"}`
+                            text: `❌ **Installation Failed**\n\nRepository: ${params.repo}\n\nError:\n${errorDetails.stderr || errorDetails.message}`
                         }]
                 };
             }
             // Step 3: Read the skill after installation
             let readOutput;
             try {
-                const { stdout, stderr } = await execAsync(readCmd, { timeout: 30000 });
+                const { stdout, stderr } = await execFileAsync("npx", readArgs, { timeout: TIMEOUTS.READ });
                 readOutput = stdout || stderr;
             }
             catch (readError) {
-                const error = readError;
+                const errorDetails = getErrorDetails(readError);
                 return {
                     content: [{
                             type: "text",
-                            text: `✅ **Installation Succeeded** but **Read Failed**\n\nRepository: ${params.repo}\nSkill: ${params.skillName}\n\n**Install Output:**\n${installOutput}\n\n**Read Error:**\n${error.stderr || error.message || "Skill not found"}\n\n💡 **Tip**: Check if the skill name is correct. Use \`npx openskills list\` to see installed skills.`
+                            text: `✅ **Installation Succeeded** but **Read Failed**\n\nRepository: ${params.repo}\nSkill: ${params.skillName}\n\n**Install Output:**\n${installOutput}\n\n**Read Error:**\n${errorDetails.stderr || errorDetails.message}\n\n💡 **Tip**: Check if the skill name is correct. Use \`npx openskills list\` to see installed skills.`
                         }]
                 };
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillsmp-mcp-lite",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Lightweight MCP server for searching AI skills from SkillsMP before starting any task",
   "type": "module",
   "main": "dist/index.js",