minecraft-modpack-server
Fail
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEREMOTE_CODE_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the user/agent to execute commands using
sudo, specifically for package installation (sudo apt install openjdk-...) and modifying system firewall rules (sudo ufw allow 25565/tcp). These operations grant the skill high-level control over the system's security posture. - [EXTERNAL_DOWNLOADS]: The skill uses
wgetto download a ZIP file from a user-provided URL (wget -O serverpack.zip "<URL>"). While the URL is intended to be provided by the user, the skill then automatically unzips and prepares this external content for execution. - [REMOTE_CODE_EXECUTION]: The skill directly executes a shell script found within the downloaded ZIP file (
bash startserver.sh). This is a critical security risk as the content of the script is external and potentially untrusted. - [PERSISTENCE]: The skill automatically modifies the user's
crontabto schedule an hourly backup script. This establishes a persistence mechanism where code (thebackup.shscript) is executed regularly in the background. - [COMMAND_EXECUTION]: The skill generates and executes multiple shell scripts (
start-minecraft.sh,backup.sh) and uses system utilities liketar,rm, andxargsto manage files and processes. It also usesechoandcatto write configuration and executable files directly to the filesystem.
Recommendations
- AI detected serious security threats
Audit Metadata