1

Automates Minecraft Java Edition by analyzing screenshots and issuing keyboard and mouse commands to control the player and interact with the game.

Security Scan

The skill's documentation and code disagree about what it controls, a required module is missing, and the instructions reference functions that the included code does not provide — these inconsistencies warrant caution before installing.

Purpose & Capability

The description and SKILL.md describe automating Minecraft via mc_* screenshot and input functions, but the included Python file (roco.py) implements roco_* wrappers around a RocoActions class (mentions QQ login and a browser controller). The mismatch between 'Minecraft' and 'Roco/洛克王国' suggests the package is inconsistent or mislabeled.

Instruction Scope

SKILL.md directs the agent to capture screenshots (base64) and issue keyboard/mouse commands, and to analyze images via an imageModel. Those actions imply the skill will observe screen content and simulate user input — expected for an automation skill but also powerful (can capture sensitive on-screen data and control the host). The instructions themselves do not reference unrelated files or env vars, but the runtime code refers to login and browser state not described in SKILL.md.

Install Mechanism

There is no install spec (instruction-only style) and no downloaded code specified. The only shipped file is roco.py. Lack of install instructions lowers supply-chain risk, but the package is incomplete because it imports roco_actions which is not included.

Credentials

The skill declares no required credentials or config, yet roco.py mentions QQ login and a browser controller, implying it expects login state or external credentials. Also SKILL.md expects access to imageModel and input APIs which may require runtime privileges; these are not documented or justified.

Persistence & Privilege

The skill is not marked always:true and uses normal agent invocation. It does provide functions to control input and close a browser, which are normal for automation tasks but confer strong capabilities if run autonomously.

What to consider before installing

Do not install without more information. The package is inconsistent: SKILL.md targets Minecraft with mc_* functions, but the provided code wraps a RocoActions class for a different game and imports a missing module (roco_actions). That could be an accidental copy-paste or intentional misdirection. Because the skill captures screenshots and simulates keyboard/mouse input, it can read on-screen sensitive data and issue arbitrary input to your machine. Before proceeding, ask the publisher for: (1) the missing roco_actions source, (2) a clear explanation of which game this targets, and (3) what runtime APIs/permissions are required. If you must test it, run it in a tightly sandboxed VM (no access to real accounts or sensitive windows) and avoid granting autonomous invocation until you can verify its behavior.

Minecraft 游戏助手

角色定位

你是 Minecraft Java Edition 的自动化助手，通过截图观察游戏画面，用键盘鼠标指令控制角色行动。

可用指令

• mc_screenshot()：截取当前游戏画面（每次行动前必须先截图观察）
• mc_key(key)：按一个键，如 mc_key('w') mc_key('e') mc_key('Escape')
• mc_key_hold(key, seconds)：长按某键，如 mc_key_hold('w', 2.0) 向前走2秒
• mc_mouse_move(x, y)：移动鼠标
• mc_mouse_click(x, y)：点击屏幕坐标
• mc_type(text)：输入文字
• mc_chat(message)：发送聊天消息

常用按键

• 移动：W/A/S/D
• 跳跃：space
• 疾跑：按两下 W 或 Ctrl+W
• 背包：e
• 挖掘/攻击：鼠标左键（button 1）
• 放置方块：鼠标右键（button 3）
• 暂停菜单：Escape

行动原则

• 每次行动前先调用 mc_screenshot() 观察当前状态
• 行动后再截图确认结果
• 截图是 base64 图片，直接用 imageModel 分析内容
• 告知用户当前观察到的场景和接下来的计划

必须暂停通知用户的情况

• 角色死亡（出现死亡界面）
• 遇到未知状况无法判断下一步
• 连续3次操作没有产生预期效果