Skip to main content
Glama
EricSeokgon

egovframe-scaffold-mcp

by EricSeokgon

폐쇄망 오프라인 번들 만들기

prepare_egovframe_offline_bundle

망분리(폐쇄망) 개발 환경용 오프라인 번들을 인터넷 PC 에서 만듭니다. OSV Maven 취약점 전체 덤프·고정 공통컴포넌트 아카이브(sha256 검증)·Initializr zip 템플릿(고정 지문)·재조립용 공식 공통컴포넌트 태그 미러를 한 디렉터리에 담고 bundle-manifest.json(파일별 sha256·크기·출처 URL·받은 시각)을 씁니다.

Instructions

망분리(폐쇄망) 개발 환경용 오프라인 번들을 인터넷 PC 에서 만듭니다. OSV Maven 취약점 전체 덤프·고정 공통컴포넌트 아카이브(sha256 검증)·Initializr zip 템플릿(고정 지문)·재조립용 공식 공통컴포넌트 태그 미러를 한 디렉터리에 담고 bundle-manifest.json(파일별 sha256·크기·출처 URL·받은 시각)을 씁니다. 새(또는 빈) 디렉터리에만 쓰며 dryRun(기본)은 받을 목록만 보여 줍니다. 폐쇄망 PC 에서 환경변수 EGOVFRAME_OFFLINE_BUNDLE 에 옮긴 경로를 지정하면 다운로드는 번들 파일을 지문 검증 후 쓰고, offline=false 의 OSV 조회는 로컬 덤프로 판정하며(스냅숏 기준일 표시·30일 넘으면 경고), 재조립은 번들 미러를 씁니다. Maven 의존성 jar 는 담지 않습니다(기관 저장소 미러 사용).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
dryRunNotrue(기본)면 받을 목록만
formatNo응답 형식markdown
includeNo담을 항목
outputDirYes번들을 만들 디렉터리(없거나 비어 있어야 함)
templatesNo담을 템플릿 id(기본: 고정 지문이 있는 Initializr zip 템플릿 전부, 저장소 템플릿은 지정할 때만)

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
itemsYes
notesYes
usageYes
dryRunYes
originNo
writtenYes
outputDirYes
totalBytesYes
manifestPathNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv0.45.0

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (write, open-world, non-idempotent, non-destructive), it discloses sha256 fingerprint verification, that it refuses non-empty directories, the dryRun default, the 30-day snapshot staleness warning, and what is deliberately excluded (Maven jars). This is rich behavioral context an agent cannot derive from annotations alone.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the bundle contents are front-loaded before the downstream/offline behavior, and the exclusion note is a useful trailer. It is dense and long for a single paragraph, but nearly every clause conveys distinct operational information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description need not explain returns, and it still covers contents, write restrictions, dryRun semantics, fingerprint verification, and offline consumption. Nothing an agent needs to invoke it correctly appears to be missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all five parameters, and the description adds only marginal detail on dryRun and template selection. Baseline 3 is correct when the schema carries the parameter burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('creates an offline bundle for air-gapped environments, on an internet PC') and enumerates exactly what the bundle contains (OSV dump, pinned component archive, Initializr templates, origin mirror, manifest). No sibling tool performs bundle creation, so the agent can distinguish it immediately.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly situates usage ('on an internet PC', target air-gapped PC via EGOVFRAME_OFFLINE_BUNDLE) and states a constraint ('writes only to new or empty directory') and a default ('dryRun shows only the list'). It does not explicitly name conflicting siblings, but the context is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.