roblox-open-cloud
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and a utility script for the Roblox Open Cloud API that strictly adheres to security best practices, such as using the platform's native Secrets Store and avoiding hardcoded credentials.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No credential exposure or data exfiltration risks were found. The skill explicitly warns against storing API keys in source code and uses
HttpService:GetSecretfor secure retrieval. Network operations are restricted to official Roblox domains (apis.roblox.com). - [COMMAND_EXECUTION]: The utility script includes safety measures to prevent common attacks, such as a check for path traversal sequences (
..) in URL path parameters before making network requests. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a secure posture by recommending data sanitization for all external API responses and using safe JSON serialization methods.
Audit Metadata