minecraft-modpack-server

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned with Minecraft server setup, and it does not request credentials or exfiltrate data. However, it tells the agent to download a server pack from an arbitrary URL and execute bundled scripts without verification, creating meaningful supply-chain risk disproportionate to a generic setup guide.

Confidence: 90%Severity: 64%
Audit Metadata
Analyzed At
Oct 2, 2026, 04:02 PM
Package URL
pkg:socket/skills-sh/nousresearch%2Fhermes-agent%2Fminecraft-modpack-server%2F@96b2400819a309c57addaf590f309a9a262763a15acf346f1bb3d8e580832fdd