roblox-animation

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/upload_animation.py script makes network requests to the official Roblox Open Cloud API (apis.roblox.com) to upload animation assets. These operations are essential for the skill's stated purpose and target well-known, trusted service domains.
  • [COMMAND_EXECUTION]: The script scripts/upload_animation.py utilizes subprocess.run to call the rojo CLI tool. Rojo is a standard, widely-used open-source tool within the Roblox development community for building project files. This usage is legitimate and necessary for the headless upload workflow.
  • [DATA_EXPOSURE]: The skill manages the ROBLOX_API_KEY by reading it from the environment (os.environ.get), which is a recommended security practice to avoid hardcoding credentials in scripts.
  • [DYNAMIC_EXECUTION]: The skill includes scripts like to_roblox.py and r6_luau.py that generate Luau code. This code is intended to be executed manually by the user within the Roblox Studio environment to create animation sequences. The generation follows predictable templates based on the animation data provided in the specification files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 01:32 AM