roblox-game-qa-performance
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and configuration files without embedded scripts or executable code.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting runtime data from Roblox Studio (e.g., console logs, scene data) which could theoretically contain instructions. However, this risk is managed by requirements for human review of visual evidence and explicit user authorization for data-writing or external services.
- Ingestion points: The agent reads
get_console_output,SceneAnalysisresults, and the current Studio environment state (SKILL.md). - Boundary markers: No specific delimiters or boundary markers are defined for the ingested data.
- Capability inventory: Available tools include
start_stop_play,rbx-unit-test,rbx-perf-profiling,rbx-debug, andscreen_capture(SKILL.md). - Sanitization: The skill does not explicitly mandate sanitization but enforces human-in-the-loop verification for visual results and technical pass/fail states.
- [COMMAND_EXECUTION]: The instructions guide the agent in using platform-specific Roblox tools (
start_stop_play,rbx-debug) within a controlled development environment. The skill includes explicit technical constraints, such as prohibitingDataModelmodifications during debug pauses, to prevent unintended side effects.
Audit Metadata