scenario-roblox-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Python module
scripts/rbx_architecture.pyfacilitates the execution of external development tools throughsubprocess.runusing list-based arguments. These commands are used to build Roblox place files viarojo, execute Luau scripts for offline auditing vialune, and perform static analysis vialuau-lsp. These operations are standard for the intended Roblox development workflow and operate on local project files. - [DYNAMIC_EXECUTION]: The skill utilizes dynamic script loading and execution patterns within the Roblox ecosystem. Specifically,
scripts/agentkit/architecture/Loader.luaumanages the initialization of game services using therequirefunction. Additionally, theluneruntime is used to execute Luau-based audit scripts externally to Roblox Studio. - [INDIRECT_PROMPT_INJECTION]: The skill provides an auditing surface in
scripts/agentkit/architecture/ArchAudit.luauthat parses user-authored Luau code. While this ingests untrusted data, the tool's behavior is restricted to pattern matching for security risks (e.g., hardcoded secrets or network requests) and reporting findings. It does not interpolate untrusted code into executable contexts for the agent or the system. - [SAFE]: The skill includes security-positive features, such as the
ArchAudittool which specifically scans for sensitive patterns likeHttpServicecalls, hardcoded tokens, and secret assignments to help developers secure their projects. All external repository references target the official 'scenario-labs' organization, which is the verified author of the skill.
Audit Metadata