roblox-open-cloud
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The Lua script includes path validation logic that explicitly prevents directory traversal attacks by checking for the '..' pattern before making network requests.
- [CREDENTIALS_UNSAFE]: The skill promotes secure credential management by instructing the use of the Roblox Secrets Store (HttpService:GetSecret) instead of hardcoding API keys.
- [EXTERNAL_DOWNLOADS]: The skill references and interacts exclusively with official Roblox API endpoints (apis.roblox.com) and documentation (create.roblox.com), which are trusted domains for this application.
- [SAFE]: The provided script implements standardized HTTP retry logic and rate-limit handling, following official Roblox developer guidelines for production-grade automation.
Audit Metadata