roblox-unit-testing

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill uses the execute_luau tool to run unit tests within the Roblox Server DataModel during Play mode. This execution is a core part of the skill's functionality for diagnosing and running tests.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it ingests untrusted data from the environment. Ingestion points include script_read, search_game_tree, inspect_instance, and get_console_output. While it lacks explicit boundary markers or sanitization for this data, it has capabilities such as code execution (execute_luau) and search operations, which are standard for developer-centric skills.
  • [COMMAND_EXECUTION]: The skill performs search and inspection operations within the Roblox Studio project using MCP tools like script_search, script_grep, and search_game_tree to identify test targets and runners.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 09:26 AM