roblox-game

SUSPICIOUS: The skill is purpose-aligned for Roblox development, but its footprint becomes medium-risk when paired with MCP automation, especially non-official community MCP servers that can read project data and execute changes in Studio. No clear credential harvesting or malicious exfiltration is shown, so this is not confirmed malware.