R Packagedev Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited R Packagedev Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A standalone Model Context Protocol (MCP) server that exposes advanced R package development capabilities to AI assistants through natural language.
r-packagedev-mcp wraps the four most important R package development packages into a unified MCP tool surface:
| Package | Purpose | Tools provided |
|---|---|---|
| usethis | Automate package setup and configuration | create_package, use_r, use_test, use_readme_md, use_vignette, use_mit_license, use_gpl3_license, use_package, use_testthat, use_git, use_github, use_data, use_pipe |
| devtools | Full package development cycle | load_all, document, test, check, install, build, build_readme, spell_check |
| renv | Reproducible environments | renv_init, renv_snapshot, renv_restore, renv_status, renv_install, renv_update, renv_clean |
| testthat | Unit testing | test_file, test_dir |
Existing R MCP servers (e.g. rmcp) focus on statistical analysis – running arbitrary R code, fitting models, generating plots. They are not designed for the package development workflow.
Building a standalone server allows:
Rscript; it works anywhere R is installed. install.packages(c("usethis", "devtools", "renv", "testthat"))git clone https://github.com/B0ydT/r-packagedev-mcp.git
cd r-packagedev-mcp
npm install
npm run buildnode dist/index.jsThe server communicates over stdio (standard input/output), which is the default transport used by Claude Desktop, VS Code Copilot, Cursor, and most MCP clients.
claude_desktop_config.json){
"mcpServers": {
"r-packagedev": {
"command": "node",
"args": ["/path/to/r-packagedev-mcp/dist/index.js"]
}
}
}.mcp.json or settings){
"servers": {
"r-packagedev": {
"type": "stdio",
"command": "node",
"args": ["/path/to/r-packagedev-mcp/dist/index.js"]
}
}
}| Tool | Description |
|---|---|
create_package | Scaffold a new R package at a given path |
use_r | Create R/<name>.R in an existing package |
use_test | Create a matching test file under tests/testthat/ |
use_readme_md | Add README.md to the package root |
use_vignette | Create a vignette stub under vignettes/ |
use_mit_license | Add MIT LICENSE and update DESCRIPTION |
use_gpl3_license | Add GPL-3 LICENSE and update DESCRIPTION |
use_package | Add a dependency to DESCRIPTION |
use_testthat | Configure testthat testing infrastructure |
use_git | Initialise a Git repo and make an initial commit |
use_github | Create a GitHub remote and push |
use_data | Export R objects as package data under data/ |
use_pipe | Add the %>% pipe operator to the package |
| Tool | Description |
|---|---|
load_all | Simulate library(pkg) for interactive testing |
document | Run roxygen2 and update NAMESPACE |
test | Run the test suite (optionally filtered) |
check | Run R CMD check |
install | Install the package into the local library |
build | Build a source tarball |
build_readme | Render README.Rmd → README.md |
spell_check | Spell-check documentation and vignettes |
| Tool | Description |
|---|---|
renv_init | Initialise an renv project library |
renv_snapshot | Record current dependencies to renv.lock |
renv_restore | Restore packages from renv.lock |
renv_status | Check library vs lockfile sync status |
renv_install | Install packages into the renv library |
renv_update | Update packages in the renv library |
renv_clean | Remove unused packages / temp files |
| Tool | Description |
|---|---|
test_file | Run a single test file |
test_dir | Run all tests in a directory |
# Type-check without emitting
npm run lint
# Build
npm run build
# Run in dev mode (ts-node, no build step)
npm run devsrc/
├── index.ts # Entry point – starts stdio MCP server
├── server.ts # Registers all tools with the MCP SDK
├── r-executor.ts # Spawns Rscript subprocesses & formats results
└── tools/
├── usethis.ts # usethis tool schemas + handlers
├── devtools.ts # devtools tool schemas + handlers
├── renv.ts # renv tool schemas + handlers
└── testthat.ts # testthat tool schemas + handlersEach tool module exports:
z.ZodObject per tool) that defines input validation.Rscript -e call and returns the formatted output as MCP text content.CC BY 4.0
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.