minecraft-collection-c-client-utility
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to download a binary archive (MinecraftUtilitySuite.zip) from a GitHub repository owned by an account named 'martawewqc7692530'. This account is not a recognized trusted vendor or well-known organization, and the randomized character string is a common indicator of throwaway or potentially malicious accounts.
- [COMMAND_EXECUTION]: The installation and setup instructions include commands to execute the downloaded code immediately via 'dotnet run' and 'dotnet MinecraftUtilitySuite.dll'. Running unverified code from an untrusted source poses a significant security risk to the host environment.
- [METADATA_POISONING]: The overview section of the skill claims it is authored by 'ara.so', which contradicts the established author context of 'reason-machines'. Such discrepancies in authorship metadata are often used to mask the true origin of a skill or to lend it false credibility.
Recommendations
- AI detected serious security threats
Audit Metadata