roblox-input
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing untrusted player input data through standard game engine APIs.
- Ingestion points: Processes events from
UserInputService.InputBeganandInputActionlisteners (e.g.,sprint.Pressed) inSKILL.md. - Boundary markers: None (event-based input handling).
- Capability inventory: The code modifies
Humanoid.WalkSpeedandCamera.CFrameinSKILL.mdbased on input. - Sanitization: The skill follows best practices by explicitly documenting that the server should validate real speed limits and player intents, mitigating the risk associated with client-side input.
- [SAFE]: The code snippets provided use standard Roblox Luau APIs (
game:GetService) for their intended purposes. No malicious obfuscation, external data exfiltration, or unauthorized command execution was found.
Audit Metadata