roblox-datastores

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard Lua implementation patterns for Roblox development. All examples follow security best practices for the platform, such as using pcall for error handling and UpdateAsync for thread-safe data modification.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles external data retrieved from Roblox DataStores. While this data is external, the skill processes it using safe Lua table manipulation and version migration logic without exposing sensitive capabilities or executing dynamic code.
  • Ingestion points: Data retrieved via playerStore:GetAsync(key) in SKILL.md.
  • Boundary markers: None explicitly present in the data processing logic, as the data is treated as a standard Lua table.
  • Capability inventory: Limited to internal Lua table operations and standard Roblox API calls (warn, kick, SetAsync). No shell execution or network requests outside the Roblox platform.
  • Sanitization: Data is validated against DEFAULT_DATA schema in the loadData function.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 06:50 PM
Security Audit — agent-trust-hub — roblox-datastores