Skills/npm/romashka-mcp

romashka-mcp@1.0.6

VERIFIED

Publisher claims: "Official TypeScript Model Context Protocol (MCP) Server for ROMASHKA SLM & VectorRAT with Modular Facets (--mode=engine|builder|all)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher yarlabs · publishing for 16 daysInstalls 543Last detonated 7 h ago
$claude mcp add romashka-mcp -- npx -y @yarlabs/romashka-mcp
WatchReport an issue

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
API_KEYROMASHKA_API_KEYConfiguration, not credentials: ROMASHKA_ACTIVE_DOMAIN, ROMASHKA_CLOUD_URL, ROMASHKA_DEFAULT_DOMAIN, ROMASHKA_DOMAINS_DIR, ROMASHKA_EDGE_URL, ROMASHKA_MCP_MODE
Where it talks to
no vendor host named in the code
What the honeypot saw
no credential files read · no network
What we could not test
what the tools do when called with real credentials

Connect it with a scoped credential, under the guard. It asks for API_KEY, ROMASHKA_API_KEY and talks to its vendor. Give the credential to the guard, not the server: the value never enters the server's environment and only travels to the host you bind.

$vet-skills run --net declared -- npx -y @yarlabs/romashka-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-14 and scored it 93/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 27 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
6.9sprocessdependency install exit 0
27sclaimed29 tools: get_current_identity, list_domains, create_domain, calibrate_domain_bounds, search_playbooks, evaluate_decision, create_playbook, edit_playbook, approve_playbook, list_iam_directory, upgrade_upstream_playbook, escalate_to_safespace, get_builder_identity, list_regulatory_frameworks, extract_numerical_predicates, check_poincare_collision, draft_playbook_spec, validate_playbook_spec, submit_playbook_to_governance, test_playbook, get_playbook_graph, link_playbooks, verify_generation, convert_document, audit_document
27stoolsc5ca73932ae7a71a
27stools509723de34fdd79d
27stools66914a0f99fe7b23
27stoolse04cbc5c8d0bc18b
27stoolsf609d3a8d90ac74c
27stoolsed1ed8486a7dd0f5
27stoolsca9bd5182a781987
27stools7715cc6fbbe4e0c9
27stools524b7dcdadc29941
27stoolsff59c2b3ba4affb7
27stools2990be93d7a5df05
27stools6ee13e02c890ac83
27stools418d12b61dbeb3b2
27stoolscebdb6f8b142b6d8
27stools01965ea009bf9817
27stools8936806f4af31512
27stoolsf18cdeb3ade29e8a
27stoolsd781cbf107079fdc
27stools8c826576e5730c3f
27stoolsb8fd53d198678399
27stools5bff0469eee7e0f1
27stools7b1b644d6b2f31e5
27stools920b06097462c37d
27stools3ee5a7f9bdfdeb6d
27stools5a7baddb662fa878
27stools868fcaa2ef002f5c
27stoolsaa60bf0214aeb249
27stools8296e581031e94c1
27stools8ccadb2b09bf0c30
27sprocessscript backend runs setup only
27sprocessno install scripts to re-run

Static findings

No findings across 4,468 lines in 10 files.

Cost to the agent

Instructions loaded
≈71 tok
1 file · 10 in bundle
Tool list per prompt
≈6,545 tok
29 tools · 226 per tool
Handshake
1060 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 160

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for @yarlabs/romashka-mcp@1.0.6 as of 6 h ago. This is the package itself, not its dependencies.