CtrlK
BlogDocsLog inGet started
Tessl Logo

mcp-builder

MCP 服务器构建方法论 — 系统化构建生产级 MCP 工具,让 AI 助手连接外部能力

56

Quality

66%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/mcp-builder/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

83%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a strong, code-heavy methodology body: executable examples throughout, a clean diagnostic table, and explicit ordering rules for fragile steps (stdio logging, lifecycle ordering). Its main weaknesses are the absence of validate-then-retry feedback loops for destructive/batch operations and the lack of any progressive-disclosure structure splitting detail into reference files.

Suggestions

Add explicit validation checkpoints for destructive/batch flows — e.g. in section 8 deployment, a 'verify the published server runs via Inspector before announcing' step, and in section 7 a 'confirm dangerous ops with a dry-run' loop.

Split the long code-heavy sections (Tool design, Security, Deployment) into referenced files (e.g. SECURITY.md, DEPLOYMENT.md) and keep SKILL.md as an overview with one-level-deep links to satisfy progressive disclosure.

The deployment user-config snippet hardcodes an API_KEY value; flag it as an example placeholder to keep the executable samples from encouraging secret hardcoding.

DimensionReasoningScore

Conciseness

The body is dense and assumes Claude's competence — it skips explaining what MCP/JSON/PDF-style basics are and instead delivers principles, executable snippets, and a diagnostic table, so nearly every token earns its place; the only mild fluff is the opening one-liner, not enough to drop it from the 'lean and efficient' anchor.

3 / 3

Actionability

It provides complete, copy-paste-ready TypeScript/Python/bash/docker snippets (e.g. server.tool with zod schema, InMemoryTransport integration test, Dockerfile) plus a concrete troubleshooting table, matching the 'fully executable code/commands; specific examples; copy-paste ready' anchor.

3 / 3

Workflow Clarity

Multi-step flows are well sequenced — the debug flow (Inspector → manual call → real client → adjust), the lifecycle ordering (register before connect, init → connect → SIGINT cleanup), and section 10 checklists are strong — but the destructive/batch-prone security and deployment steps lack explicit validate-then-fix feedback checkpoints, so it sits between 'steps listed but validation gaps' (2) and 'clear sequence with explicit validation' (3).

2.25 / 3

Progressive Disclosure

The skill is a single self-contained SKILL.md with no references/scripts/assets bundle present and no external file pointers, so the 'clear overview with well-signaled one-level-deep references' anchor (3) cannot apply; it is well-organized into sections but is essentially an inline monolith, matching the 'some structure but content that should be separate is inline' anchor.

2 / 3

Total

10.25

/

12

Passed

Description

50%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly identifies a specific niche (MCP server building) but is written as a capability summary with no explicit 'Use when' trigger guidance, leaving the 'when to use' half implicit. It is competent but not exemplary, scoring at the middle anchor across all dimensions.

Suggestions

Add an explicit trigger clause, e.g. 'Use when building or debugging Model Context Protocol servers, or when the user wants to expose tools/resources/prompts to an AI assistant.'

Expand trigger terms to cover natural variations: 'MCP server', 'Model Context Protocol', 'MCP tool 开发', '为 AI 助手添加工具'.

Replace the abstract '方法论/系统化构建' framing with concrete actions like 'design, implement, test, and deploy MCP servers' to lift specificity toward the score-3 anchor.

DimensionReasoningScore

Specificity

Names the MCP domain and a few actions ("构建生产级 MCP 工具", "连接外部能力") but stays high-level — "方法论/系统化构建" are abstract rather than a comprehensive list of concrete actions, so it matches the 'names domain and some actions, but not comprehensive' anchor rather than the multi-action score-3 anchor.

2 / 3

Completeness

States what it does (systematically build production-grade MCP tools) but has no explicit 'Use when...' / '当...时使用' trigger guidance, so per the rubric a missing trigger clause caps completeness at 2 rather than 3.

2 / 3

Trigger Term Quality

"MCP 服务器" / "MCP 工具" are natural user terms, but coverage is thin — missing common variations like "Model Context Protocol", "MCP server 开发", or "添加/配置 MCP", matching the 'some relevant keywords but missing common variations' anchor.

2 / 3

Distinctiveness Conflict Risk

"MCP 服务器构建" is a recognizable niche unlikely to broadly conflict, but without explicit distinct trigger phrases it could still overlap with adjacent tooling-building skills, matching the 'somewhat specific but could still overlap' anchor.

2 / 3

Total

8

/

12

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository
jnMetaCode/superpowers-zh
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.