roblox-audio

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill documents the usage of AudioSpeechToText and AudioDeviceInput, which allow for the capture and transcription of live microphone audio. This creates a surface for untrusted external data to be ingested into the agent context.
  • Ingestion points: AudioSpeechToText converts live player audio into text that the agent can process (SKILL.md, references/audio-graph-vs-sound.md).
  • Boundary markers: The skill does not specify delimiters or filtering mechanisms to prevent the agent from accidentally executing instructions contained within transcribed speech.
  • Capability inventory: The skill includes scripts for audio routing and management (scripts/AudioBus.lua) using standard Roblox objects. The risk level depends on the broader tool access available to the agent.
  • Sanitization: The documentation mentions that all audio processed must comply with Roblox Community Standards.
  • [EXTERNAL_DOWNLOADS]: The skill references official Roblox documentation and assets. These are well-known platform resources and are documented neutrally as standard requirements for the functionality described.
  • [SAFE]: The provided Lua scripts and technical documentation follow standard development practices for the Roblox platform without introducing malicious logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 11:31 PM