roblox-animation
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/upload_animation.pyscript makes network requests to the official Roblox Open Cloud API (apis.roblox.com) to upload animation assets. These operations are essential for the skill's stated purpose and target well-known, trusted service domains. - [COMMAND_EXECUTION]: The script
scripts/upload_animation.pyutilizessubprocess.runto call therojoCLI tool. Rojo is a standard, widely-used open-source tool within the Roblox development community for building project files. This usage is legitimate and necessary for the headless upload workflow. - [DATA_EXPOSURE]: The skill manages the
ROBLOX_API_KEYby reading it from the environment (os.environ.get), which is a recommended security practice to avoid hardcoding credentials in scripts. - [DYNAMIC_EXECUTION]: The skill includes scripts like
to_roblox.pyandr6_luau.pythat generate Luau code. This code is intended to be executed manually by the user within the Roblox Studio environment to create animation sequences. The generation follows predictable templates based on the animation data provided in the specification files.
Audit Metadata