roblox-datastores
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Lua implementation patterns for Roblox development. All examples follow security best practices for the platform, such as using
pcallfor error handling andUpdateAsyncfor thread-safe data modification. - [INDIRECT_PROMPT_INJECTION]: The skill handles external data retrieved from Roblox DataStores. While this data is external, the skill processes it using safe Lua table manipulation and version migration logic without exposing sensitive capabilities or executing dynamic code.
- Ingestion points: Data retrieved via
playerStore:GetAsync(key)inSKILL.md. - Boundary markers: None explicitly present in the data processing logic, as the data is treated as a standard Lua table.
- Capability inventory: Limited to internal Lua table operations and standard Roblox API calls (
warn,kick,SetAsync). No shell execution or network requests outside the Roblox platform. - Sanitization: Data is validated against
DEFAULT_DATAschema in theloadDatafunction.
Audit Metadata