roblox-vfx
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Several Python scripts utilize the
subprocessmodule to perform various tasks: scripts/audition.pyandscripts/compose.pyinvoke other Python scripts within the toolkit.references/corpus/tools/utilities (contact.py,strip.py,measure.py,palette.py) executeffmpegandffprobefor media processing.- The skill instructions guide the user to execute
blenderin headless mode to run mesh generation scripts likesim/mesh/make_meshes.py. - [DYNAMIC_EXECUTION]: The toolkit generates executable code in multiple ways:
scripts/emit_luau.pyandscripts/emit_scenes.pygenerate Luau ModuleScripts (VFXKit.lua,VFXScenes.lua) from JSON definitions.scripts/payload.pyassembles Luau execution payloads by splicing files and performing placeholder substitutions.SKILL.mdinstructs users to run generated payloads in Roblox Studio usingloadstring()after fetching them from a local server.- The browser simulator in
sim/index.htmluseseval()to load thesnap.jshelper. - [EXTERNAL_DOWNLOADS]: The skill interacts with external domains for resources:
scripts/classify_lib.pyandscripts/fetch_tex_hires.pydownload asset thumbnails from the official Roblox domain (thumbnails.roblox.com).- The simulator fetches the
three.jslibrary fromcdnjs.cloudflare.comand web fonts fromfonts.googleapis.com. - [INDIRECT_PROMPT_INJECTION]: The 'harvester' workflow processes VFX data (JSON recipes) extracted from external Roblox Studio packs. While the toolkit includes filename sanitization and structured parsing, the ingestion of untrusted external content that is then used to generate logic for an AI agent represents a potential (though limited) indirect prompt injection surface.
Audit Metadata