roblox-luau
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for using standard Roblox ecosystem tools such as
rojo,luau-lsp, andselene. These tools are used for project synchronization and static analysis, which are routine tasks for the skill's primary purpose of game development. - [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided Roblox project files (
*.project.json,*.luau). It mitigates potential risks by providing a comprehensive security checklist for the agent, including mandatory validation of argument types and ranges, which prevents the generation of exploitable code. - [SAFE]: The documentation explicitly warns against common security pitfalls in the Roblox environment, such as trusting client-side data or using insecure communication primitives like server-to-client
RemoteFunctions. It encourages defensive programming practices that align with platform-specific security guidelines.
Audit Metadata