roblox-avatar-creator
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive guidelines for Roblox UGC asset creation, including mesh triangle limits, UV mapping standards, and texture requirements. All instructions are technically sound for the platform and focused on preventing asset rejection.- [COMMAND_EXECUTION]: The skill includes boilerplate Lua code for use in Roblox Studio. These scripts utilize platform-standard APIs such as
MarketplaceServicefor in-game purchases andHumanoidDescriptionfor avatar customization.- [INDIRECT_PROMPT_INJECTION]: The skill contains a Lua script (AvatarManager.lua) that ingests data from aDataManagermodule (Ingestion Point), representing a surface for external data processing. The script lacks explicit boundary markers or sanitization logic when applying these configurations to character descriptions or processing asset IDs viaMarketplaceService(Capability Inventory).
Audit Metadata