The Agent Skills Directory

[REMOTE_CODE_EXECUTION] (HIGH): The build(code=...) tool is a high-risk feature that executes Python code provided as a string. This creates a direct sink for arbitrary code execution if an attacker can influence the string passed to the tool, such as through indirect prompt injection or complex instructions.
[COMMAND_EXECUTION] (MEDIUM): The worldedit_deform tool accepts raw math expressions for terrain deformation. Similar to the build tool, this allows for dynamic evaluation of strings which can be exploited depending on the underlying implementation of the math parser.
[COMMAND_EXECUTION] (MEDIUM): Tools like worldedit_terrain_advanced and the procedural generation examples involve executing complex logic strings and Minecraft-specific commands, increasing the overall attack surface of the skill.

generating-terrain