roblox-open-cloud
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for using Roblox Open Cloud APIs. All network operations target the official Roblox domain
apis.roblox.com. - [SAFE]: The code samples for Node.js and Python follow security best practices, such as using
crypto.timingSafeEqualandhmac.compare_digestfor signature verification to prevent timing attacks. - [SAFE]: Sensitive data management is handled correctly by recommending the use of environment variables for secrets in external tools and the
HttpService:GetSecretmethod within the Roblox engine, which ensures keys are not exposed as readable strings.
Audit Metadata