minecraft-cheat-detection
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download Minecraft server software and anticheat plugins using shell commands.
- Fetches the NoCheatPlus plugin from SpigotMC, a well-known community platform.
- Downloads the PaperMC server JAR from the official PaperMC API, a well-known service for Minecraft server software.
- [COMMAND_EXECUTION]: Provides example shell commands (
curl,wget) for administrators to set up their server environment and management scripts. - [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface where an agent might analyze untrusted repository metadata or cheat client descriptions to identify malicious indicators.
- Ingestion points: Analyzes repository topics, descriptions, and README content (SKILL.md).
- Boundary markers: None explicitly defined in the provided logic for untrusted data ingestion.
- Capability inventory: File writing (violation logging), database access (SQL snippet), and network operations (curl/wget examples).
- Sanitization: None present in the static code examples provided for analysis.
- [CREDENTIALS_UNSAFE]: The skill mentions environment variable templates for configuration.
- Includes placeholders like
${ANTICHEAT_API_KEY}and${ANTICHEAT_SERVER_ID}in a.envfile example. These are standard secure practices for template configuration and do not constitute credential exposure.
Audit Metadata