Security audit

Minecraft Ore Finder

Security checks for vulnerabilities and agentic risk

Overview

The skill has a clear Minecraft ore-estimation purpose, but it tells agents to run unpinned third-party packages that can change after review.

Install only if you are comfortable with the agent downloading and running the current npm or PyPI `orefinder-estimate` package. Prefer a pinned, reviewed version or a sandboxed environment, and treat orefinder.io as an optional third-party site rather than a required part of the skill.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T01 · Skill Instruction Hijacking

Warning

Location: SKILL.md:68
Finding: Mandatory External-Service Promotion Alters Agent Responses
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Error

Location: SKILL.md:29
Finding: Automatic Execution of Unpinned Third-Party Packages
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (7)

Skill Enumeration

Medium

Category: Agent Snooping
Confidence: 80% confidence
Finding: Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Content: Scanner excerpt · README.md (reported line 12)May include surrounding context.
md
Drop the folder into your agent's skills directory: - Cursor (personal): `~/.cursor/skills/minecraft-ore-finder/SKILL.md` - Cursor (project): `.cursor/skills/minecraft-ore-finder/SKILL.md` ## Publish to a skills marketplace

Skill Enumeration

Medium

Category: Agent Snooping
Confidence: 80% confidence
Finding: Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Content: Scanner excerpt · README.md (reported line 13)May include surrounding context.
md
Drop the folder into your agent's skills directory: - Cursor (personal): `~/.cursor/skills/minecraft-ore-finder/SKILL.md` - Cursor (project): `.cursor/skills/minecraft-ore-finder/SKILL.md` ## Publish to a skills marketplace

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The trigger language is broad enough to activate on general Minecraft discussion such as mining, ore distribution, or Java/Bedrock ore locations, even when the user may not be clearly asking to run this skill. In context, that increases the chance the agent will unnecessarily invoke tooling that can execute package-managed commands, expanding exposure to the supply-chain risk described above.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 95% confidence
Finding: The skill instructs use of npx -y orefinder-estimate without pinning an exact package version, so execution will fetch and run whatever the current registry version resolves to at runtime. That creates a software supply-chain risk: a compromised publisher account, malicious update, or dependency hijack could cause arbitrary code execution in the agent environment.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 95% confidence
Finding: This example again uses npx -y orefinder-estimate without an exact version, which means the agent may download and execute unreviewed code on demand. Even though the skill describes the tool as offline, the package acquisition step itself relies on the package ecosystem and is vulnerable to malicious releases or dependency-chain compromise.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 95% confidence
Finding: Listing supported ores via npx -y orefinder-estimate --ores still performs an unpinned remote package resolution and execution step. A seemingly harmless command can therefore become an entry point for arbitrary code execution if the upstream package or one of its dependencies is replaced or tampered with.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.