roblox-physics
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns detected. The skill follows established best practices for the Roblox platform, providing clear instructions for physical simulation and queries.
- [EXTERNAL_DOWNLOADS]: The skill references official Roblox developer documentation (create.roblox.com) for assemblies, network ownership, and raycasting. These references to well-known services are documented neutrally and serve as legitimate resources for developers.
- [INDIRECT_PROMPT_INJECTION]: The instructions explicitly address the risk of untrusted client data in physics queries (e.g., raycast origins). It provides remediation guidance by instructing the agent to perform server-side validation of physics results and origins to prevent client-owned physics exploits, documenting both the ingestion points (client physics ownership) and the necessary sanitization (server-side verification).
Audit Metadata