sts2mcp-slay-the-spire-2-ai-agent
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a compiled binary (
STS2_MCP.dll) and a JSON configuration file from an external GitHub repository (github.com/Gennadiyev/STS2MCP). Binary files are opaque and cannot be easily audited for malicious behavior before execution. - [REMOTE_CODE_EXECUTION]: The setup process involves cloning a remote repository and using the
uvtool to execute a Python server (server.py). This establishes a mechanism for the AI agent to execute local code and interact with the game process on the host machine. - [COMMAND_EXECUTION]: The documentation provides shell commands for installing the
uvpackage manager, creating directories in application support paths, and moving files into game directories. These actions modify the local file system and install external software dependencies.
Audit Metadata