roblox-monetization
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides scripts for handling asynchronous purchase receipts and user ownership data from the Roblox platform. 1. Ingestion points: Data enters via the
receiptInfoparameter in theMarketplaceService.ProcessReceiptcallback inSKILL.md. 2. Boundary markers: The script uses logical checks to validate structured metadata rather than natural language boundary markers. 3. Capability inventory: UsesDataStoreServicefor persistence andRemoteEventfor server-to-client communication. 4. Sanitization: Employspcalland transaction-safe updates. - [SAFE]: The skill provides standard documentation and code templates for Roblox development. It emphasizes security best practices for the target platform, including server-side validation to prevent client-side exploits and transaction-safe data persistence.
Audit Metadata