minecraft-resource-pack
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a local validation suite consisting of a shell script (
scripts/validate-resource-pack.sh) and a Node.js shim (scripts/jq-shim.mjs). These are benign utility scripts intended to be run locally by the agent to verify the integrity and structure of resource pack assets. - [INDIRECT_PROMPT_INJECTION]: The validation scripts possess an ingestion surface as they read and process external JSON files provided by the user.
- Ingestion points: The scripts read
pack.mcmetaand all JSON files located within theassets/directory of the resource pack being validated. - Boundary markers: No specific boundary markers or "ignore" instructions are present in the scripts when processing these files.
- Capability inventory: The scripts utilize standard file system read operations (
find,test,fs.readFileSync) and process output via shell and Node.js. - Sanitization: The tool performs validation by using standard JSON parsing (
JSON.parse) to ensure the files adhere to the expected schema for Minecraft assets.
Audit Metadata