scenario-roblox-data
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/rbx_data.pyfile includes a functionfetch_profilestorethat downloads theProfileStore.luaulibrary from a public GitHub repository. This process implements high-security standards by targeting a specific pinned commit and verifying the file's integrity against a hardcoded SHA256 hash before use. - [COMMAND_EXECUTION]: The
scripts/rbx_data.pyscript utilizes the Pythonsubprocessmodule to execute theluneLuau runtime. This is used to run static analysis audits on Roblox place files and to execute simulation test suites. The execution is controlled and restricted to local scripts provided within the skill. - [DYNAMIC_EXECUTION]: The simulation environment in
scripts/agentkit/data/ServerSim.luauusesloadstring(orluau.loadin the Lune environment) to execute Luau source code. This functionality is essential for its purpose of simulating multiple isolated Roblox servers within a single process for testing logic like session locking and race conditions. - [SAFE]: The skill demonstrates defensive security practices. The
scripts/agentkit/data/DataAudit.luaumodule is a dedicated static analysis tool designed to detect common security anti-patterns in Roblox scripts, such as failing to wrap data calls inpcallor using insecure player identifiers for data keys.
Audit Metadata