minecraft-world-generation
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions are purely technical and focused on Minecraft worldgen. No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
- [DATA_EXFILTRATION]: No access to sensitive file paths (e.g., .ssh, .aws) or hardcoded credentials was found. The skill does not perform any unauthorized network operations.
- [REMOTE_CODE_EXECUTION]: While the skill includes local scripts (
validate-worldgen-json.shandjq-shim.mjs), they are used for validating JSON files on the local file system. They do not download or execute external code from the internet. - [OBFUSCATION]: No Base64, zero-width characters, homoglyphs, or other obfuscation techniques were identified in the instructions or the included scripts.
- [COMMAND_EXECUTION]: The provided Bash script executes a local Node.js shim to simulate
jqfunctionality. This is a standard developer utility pattern and does not involve dangerous command injection or privilege escalation.
Audit Metadata