rojo
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads developer tools (Rojo, Lune, Wally) from well-known GitHub repositories using the Rokit and Wally package managers. These are standard industry tools for the Roblox/Luau development ecosystem.
- [COMMAND_EXECUTION]: The skill provides instructions for standard CLI commands (
rojo serve,rokit install,wally install) and includes a helper scriptscripts/scaffold_roblox_project.shto automate project creation. The script follows shell scripting best practices, includingset -euo pipefail, and limits its operations to local directory and file creation. - [SAFE]: Localized documentation in multiple languages (DE, EN, ES, FR, JA, RU, ZH) was analyzed and found to be consistent with the primary instructions, containing no prompt injection or deceptive content.
- [SAFE]: No evidence of obfuscation, hardcoded credentials, or unauthorized persistence mechanisms was found in the provided files or scripts.
Audit Metadata