minecraft-modpack-server

SUSPICIOUS: the skill’s purpose is coherent, and most actions match Minecraft server setup, but it tells the agent to fetch an arbitrary server-pack ZIP and execute included scripts/jars without validating source, checksums, or signatures. This is primarily a supply-chain risk rather than confirmed malware; no credential harvesting or off-platform data exfiltration is evident.