roblox-unit-testing
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses the
execute_luautool to run unit tests within the Roblox Server DataModel during Play mode. This execution is a core part of the skill's functionality for diagnosing and running tests. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it ingests untrusted data from the environment. Ingestion points include
script_read,search_game_tree,inspect_instance, andget_console_output. While it lacks explicit boundary markers or sanitization for this data, it has capabilities such as code execution (execute_luau) and search operations, which are standard for developer-centric skills. - [COMMAND_EXECUTION]: The skill performs search and inspection operations within the Roblox Studio project using MCP tools like
script_search,script_grep, andsearch_game_treeto identify test targets and runners.
Audit Metadata