roblox-run-and-operate
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard development tools including Rojo, Wally, and project-specific npm scripts for building and running Roblox projects. These commands are executed locally within the repository context.
- [CREDENTIALS_UNSAFE]: References to API keys (ROBLOX_API_KEY, ASPHALT_API_KEY) and session cookies (ROBLOSECURITY) are documented as being managed via .env files. The skill provides safe commands, such as grep with a count flag, to verify their presence without exposing the values, following standard security practices for secret management.
- [REMOTE_CODE_EXECUTION]: Describes an MCP server capability (execute_luau) used for driving Roblox Studio during testing and automation. This functionality is intended for local developer workflows and is scoped to the Studio environment.
Audit Metadata