minecraft-modding-workbench
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently recommends executing Gradle commands (e.g.,
./gradlew build,./gradlew runDatagen) and standard Java utilities (e.g.,jar,javap). These are standard operations for building and inspecting Java-based Minecraft mods and align with the skill's intended functionality. - [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves analyzing external data, such as mod JAR files, source code, and NBT data. While processing untrusted third-party files represents an attack surface for indirect prompt injection, the skill includes guardrails and specific tool usage instructions to mitigate risk, such as using structured NBT-to-JSON conversion.
- [EXTERNAL_DOWNLOADS]: The skill uses an external MCP server (
@adhisang/minecraft-modding-mcp) and relies on standard build systems that download dependencies (Fabric API, NeoForge). These resources are part of the well-known modding ecosystem and are consistent with the developer-assistance nature of the skill.
Audit Metadata