minecraft-fabric-dev
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes tools to ingest and analyze external Minecraft mod JAR files and user-written Mixin code, creating a potential surface for indirect prompt injection where instructions hidden within mod metadata or code comments could attempt to influence the agent's output. Ingestion points: Tools such as
analyze_mod_jarandanalyze_mixindescribed inSKILL.md. Boundary markers: The instructions do not define specific delimiters to isolate analyzed data from the agent's core logic. Capability inventory: The skill has access to file analysis, version comparison, and documentation syncing tools. Sanitization: No evidence of automated sanitization for the content of external files being analyzed. - [EXTERNAL_DOWNLOADS]: The skill uses tools to synchronize documentation from official sources, such as
sync_fabric_docs. These network operations target well-known developer services for Fabric and Baritone, which is appropriate for the skill's primary stated purpose.
Audit Metadata