design-model
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
npxto interact with the@minecraft/creator-toolspackage for rendering and viewing 3D models. This includes commands likerendermodelandviewwhich operate on local project files.- [EXTERNAL_DOWNLOADS]: The skill triggers the download and execution of the@minecraft/creator-toolspackage from the NPM registry vianpx. This package is a trusted resource associated with the official Minecraft development environment.- [DYNAMIC_EXECUTION]: The use ofnpx -yallows for the dynamic loading and execution of scripts at runtime, specifically targeting the official creator tools provided for Minecraft add-on development.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Minecraft project files, such as.entity.jsonand.geo.json. This represents an indirect prompt injection surface if these files were to contain malicious instructions. - Ingestion points: Reads entity configuration and geometry data from
resource_packs/<pack>/entity/<id>.entity.jsonand<file>.geo.json. - Boundary markers: None identified in the prompt instructions for delimiting content from project files.
- Capability inventory: The agent can execute shell commands via
npx, write image files (writeImageFileFromPixelArt), and modify project structure throughdesignModel. - Sanitization: No explicit sanitization or validation of the content read from the JSON project files is mentioned before the agent uses the data to perform actions.
Audit Metadata