The Agent Skills Directory

[SAFE]: The skill interacts with public, unauthenticated Roblox endpoints (apis.roblox.com) to search for audio assets. These operations do not involve sensitive user data, credentials, or private information.
[SAFE]: The skill generates Luau code based on metadata retrieved from the Roblox Creator Store. It includes robust sanitization logic, such as casting asset IDs to integers in find_sfx.py and escaping string literals in emit_bank.py via the lua_str function. These measures effectively mitigate the risk of indirect prompt injection or code injection from potentially malicious asset metadata.
[SAFE]: All network operations are directed towards well-known, official Roblox domains for the purpose of asset discovery, which is the stated primary function of the skill.
[SAFE]: No evidence of obfuscation, hardcoded credentials, privilege escalation, or persistence mechanisms was found in the scripts, documentation, or metadata.

roblox-sfx