ox-inventory
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows established security principles for the FiveM environment by designating all inventory mutation tasks to server-side exports, preventing potential unauthorized client-side modifications.
- [INDIRECT_PROMPT_INJECTION]: The skill documentation addresses the handling of untrusted client-side data within server events, providing examples of robust input validation to prevent exploits.
- Ingestion points: Network events such as
shop:buydefined inrules/server-exports.mdwhich accept parameters from the game client. - Boundary markers: Implementation of logical validation checks within the event handler body.
- Capability inventory: Server-side
AddItemandRemoveItemfunctions that modify inventory state. - Sanitization: Explicit instructions for type-checking, bounds-checking, and numerical validation on all client-provided parameters.
Audit Metadata