roblox-publish-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill consists entirely of instructional markdown files designed to guide an AI agent through a release checklist for Roblox experiences. No executable scripts, shell commands, or obfuscated content were detected.
  • [SAFE]: External sources referenced in the frontmatter are official documentation files from the Roblox Creator Documentation repository on GitHub, which is a trusted and well-known service.
  • [CREDENTIALS_SAFE]: The skill explicitly instructs developers to ensure that no keys, secrets, or access tokens appear in replicated content, logs, or client-side bundles, demonstrating adherence to security best practices for secret management.
  • [INDIRECT_PROMPT_INJECTION]: While the skill involves the agent processing user project data (scripts, configurations, and assets) to verify against a checklist, it lacks any native code execution capabilities that could be exploited via malicious content in those files. The risk is negligible as it functions as a guidelines provider.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 04:06 AM
Security Audit — agent-trust-hub — roblox-publish-checklist