minecraft-resource-pack

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a developer utility for Minecraft resource packs. All scripts provided perform local file validation tasks without network access or sensitive data operations.
  • [COMMAND_EXECUTION]: The skill includes a bash validator script (validate-resource-pack.sh) and a Node.js shim (jq-shim.mjs). These are used to parse JSON and check file existence within the user-provided resource pack directory. The implementation uses secure practices (such as find -print0 and quoted variables) to prevent shell injection from malicious filenames.
  • [REMOTE_CODE_EXECUTION]: No remote code execution or external downloads were detected. The skill relies on local scripts and standard system binaries (bash, node).
  • [DATA_EXFILTRATION]: No network operations or calls to external domains are present in the scripts. The skill operates entirely on local filesystem assets related to Minecraft resource packs.
  • [PROMPT_INJECTION]: The documentation in SKILL.md is strictly instructional and does not contain any attempts to override system prompts or bypass safety guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 07:05 AM
Security Audit — agent-trust-hub — minecraft-resource-pack