roblox-studio-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include the use of system commands to manage a local asset bridge. Specifically, it suggests starting a local server using
python3 -m http.server 8777and terminating it withpkill -f "http.server 8777"to provide URLs for theupload_imagetool.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it reads and processes data from external sources within the Roblox Studio environment. If these scripts or console outputs contain malicious instructions, the agent could potentially act upon them using its available capabilities.\n - Ingestion points:
script_read,script_grep,get_console_output, andinspect_instancetools specified inSKILL.md.\n - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the ingested data.\n
- Capability inventory: The skill possesses powerful capabilities including
execute_luau,upload_image,insert_asset, and simulated input tools (user_mouse_input,user_keyboard_input).\n - Sanitization: No sanitization or validation of the ingested content is described before it is processed by the agent.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the retrieval of external content through tools like
insert_assetandsearch_asset, which interact with the Roblox Creator Store to bring external models, images, and other assets into the development environment.
Audit Metadata