roblox-gamepasses
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows the Principle of Least Privilege by explicitly instructing that all monetization fulfillment must occur on the server, preventing client-side spoofing or manipulation of purchases.
- [SAFE]: Comprehensive error handling is demonstrated throughout all code samples (e.g.,
scripts/PassPurchaseHelper.luaandreferences/purchase-flow-and-granting.md) usingpcallto safely handle yielding API calls to Roblox's MarketplaceService. - [SAFE]: The skill includes proactive safety measures by documenting the use of
PolicyServiceto gate features like paid random items (loot boxes) based on player-specific restrictions. - [SAFE]: Idempotency patterns are implemented in server-side grant handlers to prevent double-granting benefits, which is a standard security best practice for transaction processing.
- [SAFE]: No evidence of obfuscation, remote code execution, or data exfiltration was found across the analyzed files.
Audit Metadata