roblox-datastores
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate Roblox development tools and documentation following official security guidelines.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling external player data. Evidence Chain: 1) Ingestion points:
SafeDataStore.luaandSKILL.mdload player data viaGetAsync. 2) Boundary markers: The instructions emphasize server-authoritative validation for all writes. 3) Capability inventory: Scripts are limited to Roblox DataStore operations; no network exfiltration or shell execution capabilities are present. 4) Sanitization:SafeDataStore.luaincludes explicit validation for key length, value size, and user ID arrays. - [EXTERNAL_DOWNLOADS]: The skill references official Roblox technical documentation from
create.roblox.com, which are trusted and well-known sources.
Audit Metadata