Sbox MCP Server
sbox-mcp-server
npm
v2.2.0
Published by lousputthole — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP Server for s&box game engine — enables Claude to build games through conversation
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 8
high Sensitive-source and external-sink co-existMTC-FLOW-004
Tools that read sensitive data ([get_prefab_info]) and tools that can send data out ([spawn_model, spawn_citizen, network_spawn]) are exposed together. An agent can move private data to the sink.
Evidence: sources [get_prefab_info] → sinks [spawn_model, spawn_citizen, network_spawn]
Fix: Keep secret-reading and egress capabilities on separate, separately-approved servers.
Location: flow get_prefab_info → spawn_model
high Tool "spawn_model" exposes command/code executionMTC-CAP-001
Tool "spawn_model" appears to run shell commands or evaluate code (keyword "spawn" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.
Fix: Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.
Location: tool spawn_model
high Tool "spawn_citizen" exposes command/code executionMTC-CAP-001
Tool "spawn_citizen" appears to run shell commands or evaluate code (keyword "spawn" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.
Fix: Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.
Location: tool spawn_citizen
high Tool "network_spawn" exposes command/code executionMTC-CAP-001
Tool "network_spawn" appears to run shell commands or evaluate code (keyword "spawn" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.
Fix: Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.
Location: tool network_spawn
high Shell/command execution in server code (dist/tools/roundui.js)MTC-SRC-002
In the server's implementation (`dist/tools/roundui.js:67`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: e vote automatically on spawn (host only). Usually false — call StartVote() from your round machine's post-round state i
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server dist/tools/roundui.js
low Mutating tool "spawn_model" declares no destructiveHintMTC-CAP-005
Tool "spawn_model" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool spawn_model
low Mutating tool "spawn_citizen" declares no destructiveHintMTC-CAP-005
Tool "spawn_citizen" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool spawn_citizen
low Mutating tool "network_spawn" declares no destructiveHintMTC-CAP-005
Tool "network_spawn" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool network_spawn
Tools 200
Each tool and what it can reach — statically extracted from the published source.
get_prefab_inforeads sensitive datanetwork_spawnruns code / shellspawn_citizenruns code / shellspawn_modelruns code / shelladd_colliderno sensitive capabilityadd_component_to_new_objectno sensitive capabilityadd_component_with_propertiesno sensitive capabilityadd_flicker_lightno sensitive capabilityadd_host_migration_recoveryno sensitive capabilityadd_interaction_promptno sensitive capability
Show 190 more tools ↓
add_jointno sensitive capabilityadd_lipsyncno sensitive capabilityadd_movie_playerno sensitive capabilityadd_network_helperno sensitive capabilityadd_physicsno sensitive capabilityadd_ragdollno sensitive capabilityadd_rpc_methodno sensitive capabilityadd_steam_stat_currencyno sensitive capabilityadd_sync_propertyno sensitive capabilityadd_targeted_rpcno sensitive capabilityadd_tts_voiceno sensitive capabilityalign_objectsno sensitive capabilityassign_materialno sensitive capabilityassign_modelno sensitive capabilityassign_patrol_routeno sensitive capabilityassign_soundno sensitive capabilityauthor_movie_clipno sensitive capabilitybake_navmeshno sensitive capabilitybatch_add_componentno sensitive capabilitybatch_deleteno sensitive capabilitybatch_reparentno sensitive capabilitybatch_set_propertyno sensitive capabilitycapture_camera_setno sensitive capabilitycapture_topdownno sensitive capabilitycapture_viewno sensitive capabilitycommit_placement_planno sensitive capabilityconfigure_networkno sensitive capabilityconsole_runno sensitive capabilitycopy_asset_with_dependenciesno sensitive capabilitycreate_camera_effectsno sensitive capabilitycreate_camera_shakeno sensitive capabilitycreate_carry_systemno sensitive capabilitycreate_currency_accountno sensitive capabilitycreate_currency_pickupno sensitive capabilitycreate_cutscene_directorno sensitive capabilitycreate_day_night_clockno sensitive capabilitycreate_dialogue_systemno sensitive capabilitycreate_economy_walletno sensitive capabilitycreate_event_busno sensitive capabilitycreate_event_directorno sensitive capabilitycreate_floating_combat_textno sensitive capabilitycreate_gacha_drop_tableno sensitive capabilitycreate_gameobjectno sensitive capabilitycreate_health_systemno sensitive capabilitycreate_hold_to_confirmno sensitive capabilitycreate_host_rpc_actionno sensitive capabilitycreate_idle_economyno sensitive capabilitycreate_interactableno sensitive capabilitycreate_inventoryno sensitive capabilitycreate_killcamno sensitive capabilitycreate_leaderboard_panelno sensitive capabilitycreate_lobby_managerno sensitive capabilitycreate_local_player_resolverno sensitive capabilitycreate_loot_table_resourceno sensitive capabilitycreate_materialno sensitive capabilitycreate_meta_progressionno sensitive capabilitycreate_needs_systemno sensitive capabilitycreate_network_eventsno sensitive capabilitycreate_networked_playerno sensitive capabilitycreate_npc_brainno sensitive capabilitycreate_npc_schedule_brainno sensitive capabilitycreate_npc_spawnerno sensitive capabilitycreate_objective_systemno sensitive capabilitycreate_offline_progressno sensitive capabilitycreate_pickupno sensitive capabilitycreate_placement_modeno sensitive capabilitycreate_prefabno sensitive capabilitycreate_round_phase_machineno sensitive capabilitycreate_save_systemno sensitive capabilitycreate_signed_saveno sensitive capabilitycreate_sound_eventno sensitive capabilitycreate_stat_modifier_systemno sensitive capabilitycreate_utility_aino sensitive capabilitycreate_weighted_loot_tableno sensitive capabilitydebug_clearno sensitive capabilitydebug_draw_boxno sensitive capabilitydebug_draw_lineno sensitive capabilitydebug_draw_rayno sensitive capabilitydebug_draw_sphereno sensitive capabilitydelete_camera_bookmarkno sensitive capabilitydelete_gameobjectno sensitive capabilitydescribe_projectno sensitive capabilitydescribe_typeno sensitive capabilitydistribute_objectsno sensitive capabilitydress_citizenno sensitive capabilitydrive_playerno sensitive capabilitydrive_player_statusno sensitive capabilityduplicate_gameobjectno sensitive capabilityensure_input_actionno sensitive capabilityequip_modelno sensitive capabilityexecute_csharpno sensitive capabilityfind_broken_referencesno sensitive capabilityfind_in_projectno sensitive capabilityfind_objectsno sensitive capabilityfind_objects_nearno sensitive capabilityfocus_objectno sensitive capabilityframe_camerano sensitive capabilitygameplay_recording_statusno sensitive capabilitygenerate_lipsync_dialogueno sensitive capabilityget_all_propertiesno sensitive capabilityget_asset_infono sensitive capabilityget_boundsno sensitive capabilityget_compile_errorsno sensitive capabilityget_doc_pageno sensitive capabilityget_method_signatureno sensitive capabilityget_navmesh_pathno sensitive capabilityget_network_statusno sensitive capabilityget_profiler_statsno sensitive capabilityget_propertyno sensitive capabilityget_runtime_propertyno sensitive capabilityget_scene_hierarchyno sensitive capabilityget_selected_objectsno sensitive capabilityget_tagsno sensitive capabilitygrid_duplicateno sensitive capabilitygroup_objectsno sensitive capabilityinspect_model_geometryno sensitive capabilityinspect_networked_objectno sensitive capabilityinstall_assetno sensitive capabilityinstantiate_prefabno sensitive capabilityinvoke_methodno sensitive capabilityis_playingno sensitive capabilitylist_animationsno sensitive capabilitylist_asset_libraryno sensitive capabilitylist_available_componentsno sensitive capabilitylist_camera_bookmarksno sensitive capabilitylist_doc_categoriesno sensitive capabilitylist_librariesno sensitive capabilitylist_moviesno sensitive capabilitylist_prefabsno sensitive capabilitylist_soundsno sensitive capabilitymeasure_distanceno sensitive capabilitymultiplayer_test_statusno sensitive capabilitynetworking_lintno sensitive capabilityphysics_overlapno sensitive capabilityplace_patrol_routeno sensitive capabilityplay_animationno sensitive capabilityplay_movieno sensitive capabilityplay_sound_previewno sensitive capabilityplaytestno sensitive capabilityplaytest_abortno sensitive capabilityplaytest_statusno sensitive capabilitypose_citizenno sensitive capabilityrandomize_transformsno sensitive capabilityraycastno sensitive capabilityrazor_lintno sensitive capabilityread_logno sensitive capabilityrecord_gameplay_clipno sensitive capabilityrecord_playtestno sensitive capabilityredono sensitive capabilityremove_componentno sensitive capabilityrename_gameobjectno sensitive capabilityreplace_modelno sensitive capabilitysandbox_lintno sensitive capabilitysave_camera_bookmarkno sensitive capabilitysave_inspectno sensitive capabilityscatter_propsno sensitive capabilityscene_validateno sensitive capabilityscreenshot_fromno sensitive capabilityscreenshot_orbitno sensitive capabilitysearch_assetsno sensitive capabilitysearch_docsno sensitive capabilitysearch_typesno sensitive capabilityselect_objectno sensitive capabilityservices_queryno sensitive capabilityset_animgraph_paramno sensitive capabilityset_bodygroupno sensitive capabilityset_component_referenceno sensitive capabilityset_enabledno sensitive capabilityset_expressionno sensitive capabilityset_look_atno sensitive capabilityset_material_propertyno sensitive capabilityset_ownershipno sensitive capabilityset_parentno sensitive capabilityset_propertyno sensitive capabilityset_runtime_propertyno sensitive capabilityset_tagsno sensitive capabilityset_time_scaleno sensitive capabilityset_tintno sensitive capabilityset_transformno sensitive capabilitysimulate_inputno sensitive capabilitysimulate_npc_perceptionno sensitive capabilitysnap_to_groundno sensitive capabilitystart_multiplayer_testno sensitive capabilitystart_playno sensitive capabilitystop_gameplay_recordingno sensitive capabilitystop_movieno sensitive capabilitystop_multiplayer_testno sensitive capabilitystop_playno sensitive capabilitytake_screenshotno sensitive capabilityundono sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 2
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v2.2.0 latest |
A 93/100 | 8 | 1.13.0 | 2026-09-07 |
v2.1.0 |
A 93/100 | 10 | 1.9.0 | 2026-07-24 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan sbox-mcp-server --onlineMore in Gaming & Entertainment
Uncensored AI tools (chat, image, RE/malware analysis, JS deobfuscation, multi-step research) for Claude Desktop, Cursor, Cline, Zed, and any MCP client.
儿童故事 MCP 服务 - 提供故事列表和搜索功能
Grade any bet against thousands of play-by-play game simulations: win probability, odds, edge.
World Cup MCP server for the 2026 men's football tournament — live scores, fixtures, standings, read-only prediction-market signals, and paste-ready match cards. Works with Claude Code, Cursor, Codex, Windsurf, Zed. Not affiliated with FIFA or Anthropic.
MCP server exposing a live Dwarf Fortress fort to an AI agent as curated, semantic tools
MCP Server for Arknights: Endfield (TypeScript / stdio + Streamable HTTP)