minecraft-modpack-server

SUSPICIOUS: the skill’s purpose is coherent, but its install flow relies on downloading an arbitrary modpack ZIP and executing pack-provided scripts/jars with no provenance or integrity verification. There is no sign of credential theft or covert exfiltration, but the unverifiable download-and-execute chain makes it a high supply-chain risk.