roblox-monetization

Warn

Audited by Snyk on Aug 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The SKILL.md is explicitly a monetization guide that includes platform payment APIs and server-side receipt handling. It contains concrete calls to MarketplaceService to prompt purchases (PromptGamePassPurchase, PromptProductPurchase) and a ProcessReceipt handler that grants purchases—these are specific, platform-level functions whose purpose is to accept/pay for transactions and grant items. It also documents DevEx payouts via Tipalti (real-money payout flow). This is not a generic tool; it is specifically designed to execute financial transactions within Roblox and convert in-game currency to real money.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 14, 2026, 06:50 PM
Issues
1
Security Audit — snyk — roblox-monetization