Skills
Navigate
skills/zocomputer/skills/minecraft-server/Gen Agent Trust Hub

minecraft-server

Warn

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/minecraft.sh script contains a command injection vulnerability in the cmd_whitelist and cmd_op functions. Player names provided as arguments are interpolated directly into a Python script string executed via python3 -c without sanitization or escaping.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the Minecraft version manifest and server JAR from Mojang's official release servers.
  • [EXTERNAL_DOWNLOADS]: The setup script configures the Adoptium (Eclipse Foundation) APT repository and installs the Temurin Java Runtime Environment.
  • [COMMAND_EXECUTION]: The script executes administrative commands to manage system packages and repository configurations, such as apt-get install and writing to /etc/apt/sources.list.d/.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 12, 2026, 07:32 AM