minecraft-orchestra
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing supplementary tools from the author's GitHub repository (github.com/hairyf/skills) using the npx skills command to support the modding workflow.
- [COMMAND_EXECUTION]: Employs Bash and npx to manage dependencies, perform asset post-processing, and execute automated client-side testing via gradlew.
- [DATA_EXFILTRATION]: Integrates with external AI services for content generation. The skill follows best practices by instructing the user to configure these services through environment settings rather than hardcoding sensitive API keys.
- [PROMPT_INJECTION]: Processes user-provided mod ideas and asset descriptions. The system includes integrated 'User Review Gates' that mandate manual approval before completing tasks, effectively managing the risk of unwanted behavior from indirect injection.
Audit Metadata