skill-to-mcp
Provides an MCP server that converts a collection of Claude Skills (organized as skill directories with SKILL.md YAML frontmatter) into MCP-accessible resources. It auto-discovers skills and exposes tools to list skills, fetch skill details (SKILL.md content plus file listings), and read related files within a skill directory with traversal protection.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
README states 'directory traversal protection' for get_skill_related_file, which is a strong scoped-access control. However, authentication/authorization is not described, and rate limiting is not mentioned. TLS/HTTPS requirements for HTTP transport are not documented here. Secrets are not discussed; likely low risk for secrets because the primary inputs are local paths and skill files, but details are not provided.
⚡ Reliability
Best When
You have a curated set of skill directories on disk and want an MCP client/agent to retrieve skill content and associated files safely and consistently.
Avoid When
You need strong user-level access control, rate limiting guarantees, or audited multi-tenant security controls out of the box.
Use Cases
- • Expose a local collection of Claude Skills to MCP-capable LLM apps
- • Programmatically browse skill metadata (name/description) for retrieval or planning
- • Fetch skill documentation/content and supporting files (scripts/references/examples) for downstream agents
- • Maintain multiple skill collections via different SKILLS_DIR configurations (dev/prod or domain-specific)
Not For
- • Serving remote or multi-tenant untrusted users (package appears oriented to local filesystem skills)
- • Providing a general-purpose file server over arbitrary paths (only skill-directory scoped access is intended)
- • Production SaaS deployments that require built-in user authentication/authorization
Interface
Authentication
The README describes local configuration for SKILLS_DIR and MCP transport options but does not describe any authentication mechanism.
Pricing
Open-source package; no pricing info provided.
Agent Metadata
Known Gotchas
- ⚠ Requires a correctly structured skills directory containing SKILL.md files; missing/malformed frontmatter may affect discovery/metadata extraction.
- ⚠ File access is scoped to the skill directory; requesting files outside that scope should be rejected.
- ⚠ For deployments using HTTP transport, the server is likely bound to your configured environment/host; ensure you don't expose it unintentionally on public networks.
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for skill-to-mcp.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-03-30.