minecraft-modpack-server

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned with Minecraft server setup, and it does not request credentials or exfiltrate data. However, it tells the agent to download a server pack from an arbitrary URL and execute bundled scripts without verification, creating meaningful supply-chain risk disproportionate to a generic setup guide.

Confidence: 90%Severity: 64%
Audit Metadata
Analyzed At
Sep 5, 2026, 12:07 PM
Package URL
pkg:socket/skills-sh/zapabob%2Fskills%2Fminecraft-modpack-server%2F@7b280be63bf365e98ee8c32b574d323101d63ead46e7934e8a17d9daf89742e2