roblox-avatar-creator

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides comprehensive guidelines for Roblox UGC asset creation, including mesh triangle limits, UV mapping standards, and texture requirements. All instructions are technically sound for the platform and focused on preventing asset rejection.- [COMMAND_EXECUTION]: The skill includes boilerplate Lua code for use in Roblox Studio. These scripts utilize platform-standard APIs such as MarketplaceService for in-game purchases and HumanoidDescription for avatar customization.- [INDIRECT_PROMPT_INJECTION]: The skill contains a Lua script (AvatarManager.lua) that ingests data from a DataManager module (Ingestion Point), representing a surface for external data processing. The script lacks explicit boundary markers or sanitization logic when applying these configurations to character descriptions or processing asset IDs via MarketplaceService (Capability Inventory).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 06:05 PM