minecraft-collection-c-client-utility
Fail
Audited by Snyk on Jun 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). These links are suspicious because the GitHub repo and release come from a seemingly random/unknown username (a common red flag) that provides a direct downloadable ZIP (which can contain executables), and the short .so domain is unfamiliar — together these match high-risk indicators for malware distribution.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The installation instructions fetch and install remote executables from GitHub (e.g. https://github.com/martawewqc7692530/MineCraft-Collection-C-Client/releases/latest/download/MinecraftUtilitySuite.zip and https://github.com/martawewqc7692530/MineCraft-Collection-C-Client.git) which are then built/run locally, so the skill relies on externally fetched code that will be executed at runtime.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata