roblox-asset-pipeline
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides defensive guidelines for Roblox development, specifically requiring audits for third-party scripts and instances.
- [SAFE]: No indicators of malicious intent, such as hardcoded credentials, data exfiltration, or obfuscated payloads, were identified.
- [PROMPT_INJECTION]: The skill interacts with external Roblox Creator Store assets, representing a surface for indirect prompt injection. Ingestion points: SKILL.md references the use of search_asset and insert_asset to retrieve external models and packages. Boundary markers: Explicit instructions to use roblox-creator-store-security-audit and manual inspection before trusting imported content. Capability inventory: The skill utilizes tools to insert instances into the workspace and inspect their properties. Sanitization: Employs a dedicated security audit tool and specific quarantine workflows to mitigate risks from untrusted assets.
Audit Metadata