roblox-audio
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents the usage of
AudioSpeechToTextandAudioDeviceInput, which allow for the capture and transcription of live microphone audio. This creates a surface for untrusted external data to be ingested into the agent context. - Ingestion points:
AudioSpeechToTextconverts live player audio into text that the agent can process (SKILL.md, references/audio-graph-vs-sound.md). - Boundary markers: The skill does not specify delimiters or filtering mechanisms to prevent the agent from accidentally executing instructions contained within transcribed speech.
- Capability inventory: The skill includes scripts for audio routing and management (
scripts/AudioBus.lua) using standard Roblox objects. The risk level depends on the broader tool access available to the agent. - Sanitization: The documentation mentions that all audio processed must comply with Roblox Community Standards.
- [EXTERNAL_DOWNLOADS]: The skill references official Roblox documentation and assets. These are well-known platform resources and are documented neutrally as standard requirements for the functionality described.
- [SAFE]: The provided Lua scripts and technical documentation follow standard development practices for the Roblox platform without introducing malicious logic.
Audit Metadata