roblox-simulator-economy
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Lune runtime to execute local Luau scripts (
balance.luauandtest_economy_math.luau). These scripts are used for local mathematical calculations and testing. They do not execute arbitrary shell commands or access sensitive system resources. - [DATA_EXPOSURE]: The pacing calculator reads local configuration from a user-provided JSON file. However, the input is strictly parsed as JSON and validated against a rigid schema (numbers only), preventing any unauthorized data access or local file inclusion attacks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (JSON configuration) for the pacing calculator. It implements a robust validation layer in
scripts/balance.luauthat checks types, finite values, and ranges, effectively mitigating any potential for malicious data to influence the logic. - [SAFE_PRACTICES]: The implementation patterns provided in
references/server-patterns.mdspecifically instruct the developer to never trust client-provided data (timestamps, amounts, or prices) and to perform all authoritative checks on the server, which is a key security principle in Roblox development.
Audit Metadata