minecraft-vape-client-detection
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Fabric mod loader installer from its official repository at
maven.fabricmc.net, which is a well-known and trusted service within the Minecraft ecosystem. It also usesgit cloneto fetch external repository content for security analysis. - [COMMAND_EXECUTION]: Instructs the agent to execute the downloaded Fabric installer using
java -jar. It also provides several shell commands for file system analysis (find,git log) and a Python script for calculating file hashes usinghashlib. - [PROMPT_INJECTION]: The skill facilitates the analysis of untrusted third-party repositories, creating a surface for indirect prompt injection if the analyzed repository contains malicious instructions intended to manipulate the agent's behavior.
- Ingestion points: Content from cloned repositories, including README files and source code.
- Boundary markers: None identified for delimiting untrusted repository content.
- Capability inventory: File system access (
git clone,find), network access (curl), and code execution (java -jar). - Sanitization: No specific sanitization or filtering is mentioned for processing the contents of external repositories.
Audit Metadata