scenario-roblox-gameplay
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The Python utility
rbx_gameplay.pyexecutes thelunecommand-line tool viasubprocess.run. This is used to perform offline unit tests and place audits, which is consistent with the skill's purpose as a developer tool. - [DYNAMIC_EXECUTION]: The skill dynamically generates Luau code chunks (
INSTALL_LUAU,FIXTURES_LUAU) to automate the installation of modules and the creation of test fixtures within Roblox Studio. This process uses a bridge to communicate with the Studio data model. - [INDIRECT_PROMPT_INJECTION]: The skill's auditing component (
GameplayAudit.luau) ingests and analyzes script source code from external Roblox place files. While this creates a surface for processing untrusted data, the logic is focused on detecting deprecated APIs and logic errors rather than executing the analyzed content. - [EXTERNAL_DOWNLOADS]: The documentation references technical tutorials on YouTube and official Roblox Creator documentation. These are well-known, trusted services used for instructional purposes and do not involve the download of executable malicious payloads.
Audit Metadata