roblox-game-visual-assets
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted third-party assets from the Roblox Creator Store, which introduces a potential surface for indirect prompt injection if those assets contain malicious instructions. The skill proactively addresses this through defensive instructions.
- Ingestion points: Data and assets retrieved via search_asset and insert_asset (SKILL.md).
- Boundary markers: Mandatory isolation of imported assets in game.ServerStorage and strict script review before integration.
- Capability inventory: Tools including script_read, inspect_instance, and search_game_tree are provided to audit external content.
- Sanitization: Instructions require identifying and removing obfuscated code or scripts with remote/data access capabilities.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the acquisition of assets from the Roblox Creator Store using platform-native tools. This involves interaction with a well-known service to retrieve remote resources.
Audit Metadata