roblox-networking
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements security best practices for the Roblox platform, including server authority, rate limiting, and argument sanitization.
- [INDIRECT_PROMPT_INJECTION]: The skill describes interfaces for ingesting data from untrusted remote clients as part of its core functionality for server-side validation.
- Ingestion points: Untrusted data enters the server context via
RemoteEvent.OnServerEventandRemoteFunction.OnServerInvokehandlers, as documented inSKILL.mdandreferences/remote-and-bindable-patterns.md. - Boundary markers: The instructions explicitly define the client-server boundary and provide a conceptual framework for treating client input as 'intent' rather than 'outcome'.
- Capability inventory: The skill provides logic for rate limiting (
scripts/RateLimiter.lua) and references capabilities such as player banning and network ownership control. - Sanitization: The skill includes detailed sanitization patterns for numbers, instances, and dictionaries in
references/remote-and-bindable-patterns.mdandreferences/server-authority-and-validation.mdto mitigate malicious input.
Audit Metadata