roblox-testing
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash driver script in
references/cloud-test-runner.mdintended for CI environments, which executes shell commands such ascurlandjqto interact with Roblox cloud infrastructure. - [EXTERNAL_DOWNLOADS]: The skill facilitates communication with Roblox's official API (
apis.roblox.com) for uploading place files and managing execution tasks. - [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection by processing external task logs.
- Ingestion points: The bash script in
references/cloud-test-runner.mdfetches remote execution logs from the Roblox API. - Boundary markers: No boundary markers or ignore-instruction warnings are specified for the processed log content.
- Capability inventory: The skill utilizes shell command execution via
curlandjqto manage CI tasks. - Sanitization: The external log content is printed to the console without sanitization or filtering.
Audit Metadata