RoleCraftThe Security-First Skill Manager

Three commands to productive ​

npm install -g rolecraft
rolecraft search code-review
rolecraft install sametcelikbicak/coverage-guard --global

Install from a local path, a GitHub shorthand (owner/repo), any git URL, or a multi-skill repository. --dry-run prints the plan without touching disk. Full walkthrough: Getting Started.

Proof, not promises ​

• OpenSSF Scorecard 8.0/10 — the same score the README badge reports.
• Zero runtime dependencies — Node.js built-ins only. How it compares
• A security scanner that admits its limits — what it catches and what it does not
• Measured benchmark, caveats included — results and method

Which agent do you use? ​

90 agents are known, 65 of them verified — opencode, Claude Code, Cursor, Codex, Copilot, Gemini CLI, Windsurf, Aider, Zed, Amp, Grok and more. Skills go to each agent's own directory.

MCP servers are configured for the 9 agents that support them (opencode, Claude Code, Cursor, Windsurf, Devin, Copilot, Continue, oh-my-pi, Muse Code). Full table: Agent Discovery.

Where to go next ​

See also ​

• Getting Started — a five-minute walkthrough.
• Commands — every command, grouped by intent.
• Install — get rolecraft onto every agent you use.