mcp_replay_dota2

The server relies on external dependencies like `python-manta` (a C++-based replay parser) and the OpenDota API for data fetching. Replay files (50-400MB) are downloaded from OpenDota and stored locally; while the download process uses standard practices (requests.get, raise_for_status, timeouts), the parsing of untrusted binary files inherently carries a risk of vulnerabilities in the parser. LLM interactions for coaching analysis occur via client-side sampling (`ctx.sample`), offloading potential data exfiltration risks to the client implementation rather than the server itself. No direct code injection vulnerabilities (e.g., `eval`) or hardcoded sensitive API keys were found within the provided source.