minecraft-world-generation
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is focused on Minecraft world generation data (JSON) and providing a local validation environment.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or downloads from unknown sources were detected. All external links point to trusted documentation or well-known community tools.
- [COMMAND_EXECUTION]: The skill includes a bash script (
validate-worldgen-json.sh) and a Node.js shim (jq-shim.mjs). These tools are designed for local validation of Minecraft datapack JSON files. They perform file system operations (find, read) on the project directory provided by the user but do not exhibit dangerous behaviors such as network exfiltration or privilege escalation. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests user-provided JSON files for validation, the processing logic in both the bash script and the Node.js shim is restricted to hardcoded filters and standard structural checks. There are no capabilities (e.g., eval, network access) that could be exploited via malicious content in the processed data.
- [OBFUSCATION]: No obfuscated code, encoded URLs, or hidden characters were found in the instructions or scripts.
Audit Metadata