minecraft-modpack-server

Fail

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEREMOTE_CODE_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs the user/agent to execute commands using sudo, specifically for package installation (sudo apt install openjdk-...) and modifying system firewall rules (sudo ufw allow 25565/tcp). These operations grant the skill high-level control over the system's security posture.
  • [EXTERNAL_DOWNLOADS]: The skill uses wget to download a ZIP file from a user-provided URL (wget -O serverpack.zip "<URL>"). While the URL is intended to be provided by the user, the skill then automatically unzips and prepares this external content for execution.
  • [REMOTE_CODE_EXECUTION]: The skill directly executes a shell script found within the downloaded ZIP file (bash startserver.sh). This is a critical security risk as the content of the script is external and potentially untrusted.
  • [PERSISTENCE]: The skill automatically modifies the user's crontab to schedule an hourly backup script. This establishes a persistence mechanism where code (the backup.sh script) is executed regularly in the background.
  • [COMMAND_EXECUTION]: The skill generates and executes multiple shell scripts (start-minecraft.sh, backup.sh) and uses system utilities like tar, rm, and xargs to manage files and processes. It also uses echo and cat to write configuration and executable files directly to the filesystem.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 1, 2026, 05:58 AM