lunar-client-minecraft-launcher
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a ZIP file containing an executable from an untrusted personal GitHub repository (github.com/Bartates/lunar-client-minecraft).
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download, extract, and execute an arbitrary binary (LunarClient.exe) and a setup script (Setup.ps1) from a remote, untrusted source.
- [PRIVILEGE_ESCALATION]: The instructions require and actively prompt for Administrator privileges using the PowerShell RunAs verb to execute the downloaded binary and various system-modifying scripts.
- [COMMAND_EXECUTION]: The skill contains a script to modify Windows Defender settings to exclude the installation directory from security scans using the Add-MpPreference cmdlet.
- [INDIRECT_PROMPT_INJECTION]: The skill processes a local JSON configuration file (config.json) using ConvertFrom-Json. The lack of sanitization for these values represents a potential attack surface where malformed configuration data could influence script behavior.
Recommendations
- AI detected serious security threats
Audit Metadata