minecraft-server

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup script fetches the runtime manifest at https://launchermeta.mojang.com/mc/game/version_manifest_v2.json to obtain and curl-download the Minecraft server JAR (server_url) which the skill then runs with java -jar, so remote code is fetched at runtime and executed as a required dependency.