blockbench-pbr-materials
Fail
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by ingesting external data through the
import_texture_settool, which reads.texture_set.jsonfiles from the local file system. - Ingestion points: The
import_texture_settool (SKILL.md) reads configuration data from user-specified file paths. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the JSON data are provided.
- Capability inventory: The skill includes tools to write to the file system (
save_material_config) and modify the current project state (create_texture,paint_with_brush). - Sanitization: There are no explicit instructions to validate or sanitize the schema of the imported JSON content before use.
- [EXTERNAL_DOWNLOADS]: The skill includes links to official documentation for Bedrock texture sets hosted on a well-known service (Mojang's GitHub Pages). These references are intended for informational purposes to ensure material compatibility.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata