creator-tools-cli
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to run the Minecraft Creator Tools CLI (@minecraft/creator-tools) to perform tasks like rendering, fixing, and packaging Minecraft Bedrock Edition projects. This is the primary functionality and uses the official CLI tool.
- [EXTERNAL_DOWNLOADS]: The skill uses the npx command to download and execute the latest version of the @minecraft/creator-tools package from the npm registry. As this is an official package from the vendor, it is a trusted external resource.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface for indirect prompt injection through the processing of Minecraft project files. 1. Ingestion points: Input folders and files containing behavior packs, resource packs, and models, as referenced in SKILL.md and references/commands.md. 2. Boundary markers: No explicit boundary markers or 'ignore' instructions are defined for the project file content. 3. Capability inventory: The skill can execute CLI commands, write files to the local system, and host local servers. 4. Sanitization: The tool performs domain-specific validation of Minecraft project files but does not implement specific measures to sanitize prompt-based instructions hidden in the data.
Audit Metadata