roblox-testing

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a bash driver script in references/cloud-test-runner.md intended for CI environments, which executes shell commands such as curl and jq to interact with Roblox cloud infrastructure.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates communication with Roblox's official API (apis.roblox.com) for uploading place files and managing execution tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection by processing external task logs.
  • Ingestion points: The bash script in references/cloud-test-runner.md fetches remote execution logs from the Roblox API.
  • Boundary markers: No boundary markers or ignore-instruction warnings are specified for the processed log content.
  • Capability inventory: The skill utilizes shell command execution via curl and jq to manage CI tasks.
  • Sanitization: The external log content is printed to the console without sanitization or filtering.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 05:27 PM