roblox-toolchain
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official installation script for Rokit from the project's primary GitHub organization.
- [REMOTE_CODE_EXECUTION]: Documentation includes a common pattern for CI/CD setup involving the execution of a remote script through shell, which is standard for the installation of the featured toolchain manager.
- [COMMAND_EXECUTION]: Examples provided for tool installation include the use of flags to bypass trust checks, which is a routine practice in automated environments to prevent blocking operations.
- [PROMPT_INJECTION]: The skill instructs the agent on how to interact with project manifest files like wally.toml and pesde.toml, which constitutes an indirect prompt injection surface if those files contain untrusted content.
Audit Metadata