Sts2 Modding Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Sts2 Modding Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol server for Slay the Spire 2 modding. Connects to any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, Windsurf, etc.) and provides 151 tools for reverse-engineering the game, generating mod code, building/deploying, live-inspecting the running Godot engine, and autonomously playtesting mods.
Your mileage will vary depending on which LLM you use. This project is a fun experiment — please ping me if you have issues, want to suggest a feature, or find a bug.
python --versionilspycmd (see note below)dotnet tool install -g ilspycmd (for C# decompilation).NET version note: ilspycmd targets .NET 8.0. If you only have .NET 9.0+ installed, decompilation will fail with a runtime error. The fix is to also install the .NET 8.0 runtime alongside your .NET 9.0 SDK. Both can coexist without issues.git clone https://github.com/elliotttate/sts2-modding-mcp.git
cd sts2-modding-mcp
python -m venv venv
# Activate the virtual environment:
source venv/bin/activate # macOS / Linux
# source venv/Scripts/activate # Windows (Git Bash)
# venv\Scripts\activate.bat # Windows cmd
# venv\Scripts\Activate.ps1 # Windows PowerShell
pip install .
python -m sts2mcp.setup # auto-finds game, installs tools, decompilesThe setup wizard automatically finds your Steam install, installs ilspycmd if needed, decompiles the game source, optionally downloads GDRE Tools for asset extraction, and builds the Roslyn code analyzer. In CI or non-interactive shells, use python -m sts2mcp.setup -y to auto-accept all prompts.
The MCP server connects to any AI tool that supports the Model Context Protocol. Point the config at the venv's Python so dependencies are always available.
Replace /path/to/sts2-modding-mcp with the actual path where you cloned the repo.Claude Code (CLI):
# macOS / Linux:
claude mcp add sts2-modding /path/to/sts2-modding-mcp/venv/bin/python -- /path/to/sts2-modding-mcp/run.py
# Windows:
claude mcp add sts2-modding C:\path\to\sts2-modding-mcp\venv\Scripts\python.exe -- C:\path\to\sts2-modding-mcp\run.pyClaude Desktop — edit your config file (%APPDATA%\Claude\claude_desktop_config.json on Windows, ~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"sts2-modding": {
"command": "/path/to/sts2-modding-mcp/venv/bin/python",
"args": ["/path/to/sts2-modding-mcp/run.py"]
}
}
}On Windows, use full paths with backslashes: "command": "C:\\Users\\YourName\\sts2-modding-mcp\\venv\\Scripts\\python.exe".
Cursor / Windsurf / Other MCP Clients — most editors use the same JSON config format. Check your editor's MCP documentation for where to place it.
/mcp — you should see sts2-modding listed as connected. Try: "Use get_game_info to show me the server status."If the server isn't connecting, run python run.py directly in the activated venv to check for startup errors.
Once connected, ask your AI assistant things like:
When STS2 updates:
decompile_game (or manually re-run ilspycmd) to refresh the decompiled source. The Roslyn index automatically rebuilds on the next query.recover_game_project to re-extract scenes, textures, resources, and GDScript from the updated PCK.Detailed reference material is in the docs/ directory:
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.