blockbench-vanilla-textures
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill downloads texture assets and JSON metadata from official Mojang repositories via the jsDelivr CDN and GitHub API, which are well-known and trusted services.
- [COMMAND_EXECUTION]: The skill utilizes local Node.js and Python scripts to automate texture resolution, downloading, and image processing. These scripts are transparent and perform legitimate operations related to the skill's stated purpose.
- [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on
Pillow(PIL), a standard and well-maintained Python library for image manipulation. - [DYNAMIC_EXECUTION]: The documentation includes a JavaScript snippet for platform-specific evaluation (e.g.,
risky_eval) to convert remote images into data URLs. This code uses standard Web APIs (fetch,FileReader) and is provided as a transparent utility for environments with restricted file system access.
Audit Metadata