← Back to search

tufan-blox-bridge

drgost1 Scanned 1d ago

MCP server for Roblox Studio AI-driven development — scripts, instances, properties, Luau execution, two-way file sync, and git history.

npm
B
79.3 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 83

grep_scripts
annotations: none low

Search the Source of all scripts for a Lua pattern. Returns path:line: text.

pattern string ignoreCase boolean
ping
annotations: none low

Ping a connected Studio place. Returns its place name + session.

is_running
annotations: none low

Whether a simulation is running in the target Studio, and whether it's Run mode.

run_luau
annotations: none low

Execute Luau in the Studio plugin context (EDIT mode — runs against the edit DataModel, not a running playtest's server/client). Captures the return value and printed output. Full plugin API access.

code string
list_places
annotations: none low

List the Roblox Studio places currently connected to the bridge (placeId, name, gameId, project root). Use the placeId or name as the `place` arg on other tools to target a specific one.

pull_place
annotations: none low

Re-pull a connected place's full script tree into its local mirror folder (<project>/projects/<name>_<placeId>). Runs automatically on connect; use this to force a refresh.

copy_script_across
annotations: none low

Copy a script's Source from one connected place to another. The headline cross-place op — e.g. push a shared module from one game into another.

toPlace union destPath string fromPlace union sourcePath string
get_properties
annotations: none low

Get all (or chosen) properties of the instance at path.

path string names array
set_property
annotations: none low

Set one property. Value can be a primitive or {Vector3:[x,y,z]}, {Color3:[r,g,b]}, {UDim2:[xs,xo,ys,yo]}, {EnumItem:'Enum.Material.Wood'}.

name string path string value any
mass_edit
annotations: none low

Apply MANY different property edits in ONE call (and one undo entry): edits = [{path, name, value}, ...]. Use this instead of many set_property calls — far fewer round-trips (Roblox HttpService caps ~500 req/min, so bulk single-edits throttle).

name string path string edits array value any
search_by_property
annotations: none low

Find instances under rootPath whose property equals value. For name/class search use search_objects instead; for the Roblox marketplace use search_assets.

name string value any rootPath string
get_attributes
annotations: none low

All attributes of the instance at path.

path string
set_attribute
annotations: none low

Set an attribute on the instance at path (value may be primitive or a typed wrapper like {Vector3:[x,y,z]}).

name string path string value any
mass_set_attribute
annotations: none low

Set MANY attributes across instances in ONE call + one undo entry: edits = [{path, name, value}, ...].

name string path string edits array value any
scene_state
annotations: none low

Spatial snapshot of the scene as the editor camera sees it: camera intrinsics (CFrame, FOV, viewport) + a curated list of visible objects, each with world position/orientation/size AND its on-screen pixel (x,y,depth,onScreen) via WorldToScreenPoint. This is what grounds a screenshot — it lets you say \"object X is at screen (px,py) = world (x,y,z)\". A Model counts as one object (bounding box); closest objects first. Pair with capture_screenshot. Read-only.

maxDepth number rootPath string maxObjects number nameFilter string classFilter string onScreenOnly boolean
pick
annotations: none low

Raycast from a screen point into the scene and report what's under it: the hit instance (+ nearest Model ancestor), world position, surface normal, distance, and the part's CFrame/size/orientation. Give x,y in pixels OR nx,ny in 0..1 OR nothing for the viewport center. Powers \"what is that?\" and tracing (sample points along a screen path). Read-only.

x number y number nx number ny number only array range number ignore array
objects_in_region
annotations: none low

List parts whose bounds overlap a region: a box (center+size), a sphere (center+radius), or 'around' an instance (its bounding box, optionally padded). Spatial query for \"what's near X / inside this area\". Returns part paths + world pos + size. Read-only.

pad number size array around string center array ignore array radius number maxParts number classFilter string
place_on
annotations: none low

Compute and apply an accurate placement: raycast to a surface (a screen point, a target instance's TOP via onTarget, or straight down via ground), then sit the object FLUSH on it — offset by the object's bounding box so it doesn't clip or float. Optional alignToNormal (rotate to the surface) and snap (grid studs). Use dryRun to get the computed CFrame without moving. Moves a Part (CFrame) or a Model (PivotTo, bbox-center flush). Write tool.

x number y number nx number ny number path string snap number range number dryRun boolean ground boolean ignore array onTarget string extraOffset number alignToNormal boolean
describe
annotations: none low

Full context of one instance in a SINGLE call: identity, key properties, attributes,

path string
tag
annotations: none low

Read or change CollectionService tags on the instance at path. action='get' lists its tags;

tag string path string action enum
get_tagged
annotations: none low

All instances carrying a CollectionService tag, optionally filtered to a className (IsA).

tag string className string
capture_screenshot
annotations: none low

Capture a PNG screenshot of the Roblox Studio 3D viewport only — cropped to the editor viewport, excluding the ribbon and docked panels (assumes the default layout: ribbon on top, Explorer/Properties docked right). Pass fullWindow:true to capture the entire Studio window instead. Server-side OS capture; errors if Studio isn't open/on-screen. Use this to visually verify UI/scene/VFX you just built. Windows-only.

snapshot
annotations: none low

Checkpoint a subtree before risky changes. Keeps an exact live clone in

name string path string
restore
annotations: none low

Restore a snapshot: destroys whatever's currently at its original location and re-clones

name string parentPath string
list_snapshots
annotations: none low

List saved snapshots (name, origin, time, size).

delete_snapshot
annotations: none low

Delete a saved snapshot.

name string
typecheck
annotations: none low

Type-check Luau with luau-lsp (the Luau analyzer) over a place's synced script mirror — catches

project_health
annotations: none low

One-look census of the whole place: instance / script / part counts, total Luau size,

batch
annotations: none low

Run MANY operations in ONE round-trip and ONE undo entry. The single biggest

op string args record stopOnError boolean
get_recent_errors
annotations: none low

Errors + warnings the plugin has pushed live (incl. during a playtest), read from

since number severity enum
get_output_log
annotations: none low

Recent Studio Output messages (edit mode). Optionally filter by severity.

severity enum maxEntries number
generate_asset
annotations: none low

FULL PIPELINE: turn a text prompt (or an image) into a game-ready asset in the open place —

search_assets
annotations: none low

Search the Roblox marketplace (Toolbox) for assets. Returns id + name, and flags assets that contain scripts (⚠ possible backdoor vector). Server-side. For instances already IN this place, use search_objects or search_by_property instead; for this place's own custom MaterialVariants, use search_materials.

limit number keyword string assetType enum
get_asset_details
annotations: none low

Marketplace details for an asset id (name, creator, type, whether it contains scripts, mesh stats).

assetId number
get_asset_thumbnail
annotations: none low

Fetch an asset's thumbnail as a PNG image so the AI can SEE what it looks like before using it. Uses Roblox's public thumbnail API (works for any public asset — no ownership needed, unlike insert_asset). Server-side.

size enum assetId number
search_materials
annotations: none low

List custom MaterialVariants defined in this place's MaterialService (name + base material), optionally filtered by name. For marketplace assets use search_assets instead; for other existing instances use search_objects/search_by_property.

name string
insert_asset
annotations: none low

Insert a marketplace asset by id under parentPath (default Workspace). NOTE: Roblox's LoadAsset only authorizes assets the logged-in user OWNS (or Roblox-made ones) — most third-party free models will fail unless you first take them (Toolbox → Add to Inventory). Tip: run scan_backdoors after inserting free models. For a LOCAL file you already have, use import_file instead; to AI-generate a new mesh, use generate_asset instead.

assetId number parentPath string
create_instance
annotations: none low

Create a new instance of className under parentPath, with optional name and properties.

name string className string parentPath string properties record
delete_instance
annotations: none low

Destroy the instance at path.

path string
clone_instance
annotations: none low

Clone the instance at path under parentPath (defaults to same parent).

path string parentPath string
move_instance
annotations: none low

Reparent the instance at path to newParentPath.

path string newParentPath string
rename_instance
annotations: none low

Rename the instance at path.

path string newName string
create_tree
annotations: none low

Build a whole nested instance subtree from ONE spec, in one call + one undo. Ideal for UIs (a panel + all its children at once). tree = { className, name?, properties?, children?: [tree, ...] }.

tree any parentPath string
history
annotations: none low

Undo or redo the last change in Studio (ChangeHistoryService). (Replaces undo + redo.)

direction enum
meshy_generate
annotations: none low

Generate a 3D model with Meshy AI from a text prompt (two-stage: geometry preview → texture

prompt string taskId string confirm boolean imageUrl string topology enum enablePbr boolean imagePath string waitSeconds number
meshy_task
annotations: none low

Inspect or act on an existing Meshy task by id: status (poll progress), download (re-fetch

action enum taskId string waitSeconds number targetPolycount number
datastore
annotations: none low

Inspect/edit a PUBLISHED game's saved data via the Open Cloud DataStore API (server-side HTTP, no

limit number order enum scope string value any action enum cursor string prefix string userIds array entryKey string allScopes boolean attributes record incrementBy number matchVersion string datastoreName string exclusiveCreate boolean orderedDataStore string
scan_perf
annotations: none low

Audit the place for runtime frame-killers in one pass (part/physics load,

http_get
annotations: none low

Fetch a URL (GET) and return the response body as text. For grabbing docs, JSON APIs, or reference data while working. Body is capped at ~100 KB; 15s timeout.

url string headers record
export_sourcemap
annotations: none low

Generate a Rojo-style sourcemap.json from a place's synced script mirror — the file luau-lsp

script_source
annotations: none low

Read OR write a script's Source. Omit `source` to READ the Source of a

path string source string
edit_script_lines
annotations: none low

Replace a line range in a script (1-indexed, inclusive) with newText — instead of re-sending the whole Source. Get line numbers from get_script_source/grep_scripts first. newText may be multi-line or empty (empties the range).

path string endLine number newText string startLine number
find_and_replace_in_scripts
annotations: none low

Project-wide plain-text find & replace across all scripts. Set dryRun=true first to preview which scripts + how many hits before applying.

find string dryRun boolean replace string
patch_script
annotations: none low

Apply MANY anchored find/replace hunks to ONE script in one call — refactor-grade editing without resending the whole file. Each hunk is a LITERAL match (not a pattern), applied in order. ATOMIC: if a required hunk's `find` isn't present it errors and writes NOTHING (so a stale patch can't half-apply or silently no-op). Mark a hunk optional to skip it when absent. Set dryRun to validate the patch applies cleanly without writing.

all boolean find string path string dryRun boolean replace string optional boolean
find_duplicates
annotations: none low

Find scripts with IDENTICAL Source — copy-pasted code ripe for extracting into a shared

minLines number
blender_process
annotations: none low

Run a canned headless-Blender operation on a local 3D file (.glb/.gltf/.fbx/.obj/.blend in;

action enum shards number target number texLimit number inputFile string timeoutSeconds number
blender_run
annotations: none low

POWER TOOL: run an arbitrary bpy (Python) script in headless Blender on this machine. The script

script string inputFile string outputFile string timeoutSeconds number
git_status
annotations: none low

Working-tree status of a project.

git_commit
annotations: none low

Stage and commit changes in a project (all changes unless paths[] given).

paths array message string
git_log
annotations: none low

Recent commits (default 20).

count number
git_diff
annotations: none low

Diff. Default = working tree. Give from/to to compare commits/refs (e.g. from 'HEAD~1' to 'HEAD', or from a commit hash). Optionally scope to one path.

to string from string path string
git_restore
annotations: none low

Restore a git-tracked file. Without source: discard working changes (restore to HEAD). With source (a commit/ref): recover that OLDER version of the file — use this to get back an edit you lost. (For restoring a non-git `snapshot` checkpoint of a live instance subtree, use restore instead.)

path string source string
git_recover
annotations: none low

Recover a DELETED / lost file: finds the most recent commit where it still had content and restores it. The one-shot 'get my script back' tool.

path string
git_show
annotations: none low

Show a commit (metadata + changed-file stat) by ref, or a file's exact content at that ref when path is given.

ref string path string
git_revert
annotations: none low

Revert a commit — creates a new commit that undoes it (safe, keeps history). Use to roll back a bad change.

ref string
git_branch
annotations: none low

List branches, or create+switch when name given.

name string
git_remote
annotations: none low

List remotes, or add one (action:'add' + name + url). Add a GitHub remote to back the place mirror up OFF-machine — the local mirror alone dies with the disk.

url string name string action enum
git_push
annotations: none low

Push commits to the remote (set one up first with git_remote add). Off-machine backup.

git_pull
annotations: none low

Pull from the remote (fetch + merge). Restore/sync a mirror from its off-machine backup.

make_responsive
annotations: none low

Make a UI subtree resolution-proof. Converts Offset→Scale across ALL the properties

x number y number mode enum path string dryRun boolean exclude array minSize boolean aspectRatio boolean referenceResolution object
scan_responsive
annotations: none low

Audit a UI subtree for what breaks on other resolutions — across the tree AND the scripts.

path string
scan_backdoors
annotations: none low

Tufan Power Tool: deep-scan a place for backdoors / exploits / obfuscation. Checks script source (require-of-Value, require-by-asset-id, loadstring, HttpGet, getfenv, exploit APIs, Discord webhooks, anti-debug, high-entropy blobs) AND the spots a script-only scanner misses — instance attributes and StringValues hiding encoded payloads. Findings sorted high→low severity. NOTE: this scans the PLACE tree; it cannot read installed Studio plugins' own source (a Roblox limit) — use list_studio_plugins to see what plugins are installed (the remote-code-plugin vector).

rootPath string severity enum
list_studio_plugins
annotations: none low

List Studio plugins installed locally on this machine (local .rbxm plugins + marketplace InstalledPlugins). Use this to spot the blind spot scan_backdoors can't reach: a third-party plugin running remote code. Server-side; no Studio call.

get_descendants
annotations: none low

All descendants of path up to maxDepth (default 5).

path string maxDepth number
get_tree
annotations: none low

Token-lean tree dump: runs of same-class siblings beyond `collapseMin` (default 6)

path string maxDepth number className string collapseMin number
search_objects
annotations: none low

Find instances by name and/or className under rootPath. matchMode controls name matching: 'substring' (default), 'exact', 'wholeWord', or 'regex'. Use 'exact'/'wholeWord' to cut the noise that plain substring search produces.

name string rootPath string className string matchMode enum caseSensitive boolean
get_services
annotations: none low

Top-level services in the DataModel.

format_scripts
annotations: none low

Format Luau on disk with StyLua (the standard Roblox formatter) over a place's synced script

check boolean
lint_scripts
annotations: none low

Lint Luau with Selene (the standard Roblox linter) over a place's synced script mirror — catches

cloud_luau
annotations: none low

Run server-side Luau against your PUBLISHED game via the Open Cloud Luau Execution API — a fresh

resume string script string versionId number waitSeconds number timeoutSeconds number
get_selection
annotations: none low

What the user currently has selected in the Studio Explorer (paths + classes).

set_selection
annotations: none low

Select the given instances in the Studio Explorer.

paths array
import_file
annotations: none low

Import a LOCAL file into Roblox: uploads it to the user's own account via the Open Cloud

name string anchor boolean insert boolean filePath string onGround boolean parentPath string description string operationId string

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 178

low
Tool 'ping' has no annotations annotation_checker · 100%
low
Tool 'is_running' has no annotations annotation_checker · 100%
low
Tool 'run_luau' has no annotations annotation_checker · 100%
low
Tool 'list_places' has no annotations annotation_checker · 100%
low
Tool 'pull_place' has no annotations annotation_checker · 100%
low
Tool 'copy_script_across' has no annotations annotation_checker · 100%
low
Tool 'get_properties' has no annotations annotation_checker · 100%
low
Tool 'set_property' has no annotations annotation_checker · 100%
low
Tool 'mass_edit' has no annotations annotation_checker · 100%
low
Tool 'search_by_property' has no annotations annotation_checker · 100%
low
Tool 'get_attributes' has no annotations annotation_checker · 100%
low
Tool 'set_attribute' has no annotations annotation_checker · 100%
low
Tool 'mass_set_attribute' has no annotations annotation_checker · 100%
low
Tool 'scene_state' has no annotations annotation_checker · 100%
low
Tool 'pick' has no annotations annotation_checker · 100%
low
Tool 'objects_in_region' has no annotations annotation_checker · 100%
low
Tool 'place_on' has no annotations annotation_checker · 100%
low
Tool 'describe' has no annotations annotation_checker · 100%
low
Tool 'tag' has no annotations annotation_checker · 100%
low
Tool 'get_tagged' has no annotations annotation_checker · 100%
low
Tool 'capture_screenshot' has no annotations annotation_checker · 100%
low
Tool 'snapshot' has no annotations annotation_checker · 100%
low
Tool 'restore' has no annotations annotation_checker · 100%
low
Tool 'list_snapshots' has no annotations annotation_checker · 100%
low
Tool 'delete_snapshot' has no annotations annotation_checker · 100%
low
Tool 'typecheck' has no annotations annotation_checker · 100%
low
Tool 'project_health' has no annotations annotation_checker · 100%
low
Tool 'batch' has no annotations annotation_checker · 100%
low
Tool 'get_recent_errors' has no annotations annotation_checker · 100%
low
Tool 'get_output_log' has no annotations annotation_checker · 100%
low
Tool 'generate_asset' has no annotations annotation_checker · 100%
low
Tool 'search_assets' has no annotations annotation_checker · 100%
low
Tool 'get_asset_details' has no annotations annotation_checker · 100%
low
Tool 'get_asset_thumbnail' has no annotations annotation_checker · 100%
low
Tool 'search_materials' has no annotations annotation_checker · 100%
low
Tool 'insert_asset' has no annotations annotation_checker · 100%
low
Tool 'create_instance' has no annotations annotation_checker · 100%
low
Tool 'delete_instance' has no annotations annotation_checker · 100%
low
Tool 'clone_instance' has no annotations annotation_checker · 100%
low
Tool 'move_instance' has no annotations annotation_checker · 100%
low
Tool 'rename_instance' has no annotations annotation_checker · 100%
low
Tool 'create_tree' has no annotations annotation_checker · 100%
low
Tool 'history' has no annotations annotation_checker · 100%
low
Tool 'meshy_generate' has no annotations annotation_checker · 100%
low
Tool 'meshy_task' has no annotations annotation_checker · 100%
low
Tool 'datastore' has no annotations annotation_checker · 100%
low
Tool 'scan_perf' has no annotations annotation_checker · 100%
low
Tool 'http_get' has no annotations annotation_checker · 100%
low
Tool 'export_sourcemap' has no annotations annotation_checker · 100%
low
Tool 'script_source' has no annotations annotation_checker · 100%
low
Tool 'grep_scripts' has no annotations annotation_checker · 100%
low
Tool 'edit_script_lines' has no annotations annotation_checker · 100%
low
Tool 'find_and_replace_in_scripts' has no annotations annotation_checker · 100%
low
Tool 'patch_script' has no annotations annotation_checker · 100%
low
Tool 'find_duplicates' has no annotations annotation_checker · 100%
low
Tool 'blender_process' has no annotations annotation_checker · 100%
low
Tool 'blender_run' has no annotations annotation_checker · 100%
low
Tool 'git_status' has no annotations annotation_checker · 100%
low
Tool 'git_commit' has no annotations annotation_checker · 100%
low
Tool 'git_log' has no annotations annotation_checker · 100%
low
Tool 'git_diff' has no annotations annotation_checker · 100%
low
Tool 'git_restore' has no annotations annotation_checker · 100%
low
Tool 'git_recover' has no annotations annotation_checker · 100%
low
Tool 'git_show' has no annotations annotation_checker · 100%
low
Tool 'git_revert' has no annotations annotation_checker · 100%
low
Tool 'git_branch' has no annotations annotation_checker · 100%
low
Tool 'git_remote' has no annotations annotation_checker · 100%
low
Tool 'git_push' has no annotations annotation_checker · 100%
low
Tool 'git_pull' has no annotations annotation_checker · 100%
low
Tool 'make_responsive' has no annotations annotation_checker · 100%
low
Tool 'scan_responsive' has no annotations annotation_checker · 100%
low
Tool 'scan_backdoors' has no annotations annotation_checker · 100%
low
Tool 'list_studio_plugins' has no annotations annotation_checker · 100%
low
Tool 'get_descendants' has no annotations annotation_checker · 100%
low
Tool 'get_tree' has no annotations annotation_checker · 100%
low
Tool 'search_objects' has no annotations annotation_checker · 100%
low
Tool 'get_services' has no annotations annotation_checker · 100%
low
Tool 'format_scripts' has no annotations annotation_checker · 100%
low
Tool 'lint_scripts' has no annotations annotation_checker · 100%
low
Tool 'cloud_luau' has no annotations annotation_checker · 100%
low
Tool 'get_selection' has no annotations annotation_checker · 100%
low
Tool 'set_selection' has no annotations annotation_checker · 100%
low
Tool 'import_file' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in drgost1-Tufan-Blox-Bridge-58ba851/server/meshy-queue.mjs:72 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: ping manifest_parser · 85%
info
Tool: is_running manifest_parser · 85%
info
Tool: run_luau manifest_parser · 85%
info
Tool: list_places manifest_parser · 85%
info
Tool: pull_place manifest_parser · 85%
info
Tool: generate_asset manifest_parser · 85%
info
Tool: copy_script_across manifest_parser · 85%
info
Tool: get_properties manifest_parser · 85%
info
Tool: set_property manifest_parser · 85%
info
Tool: mass_edit manifest_parser · 85%
info
Tool: search_by_property manifest_parser · 85%
info
Tool: get_attributes manifest_parser · 85%
info
Tool: set_attribute manifest_parser · 85%
info
Tool: mass_set_attribute manifest_parser · 85%
info
Tool: scene_state manifest_parser · 85%
info
Tool: pick manifest_parser · 85%
info
Tool: objects_in_region manifest_parser · 85%
info
Tool: place_on manifest_parser · 85%
info
Tool: describe manifest_parser · 85%
info
Tool: tag manifest_parser · 85%
info
Tool: get_tagged manifest_parser · 85%
info
Tool: capture_screenshot manifest_parser · 85%
info
Tool: snapshot manifest_parser · 85%
info
Tool: restore manifest_parser · 85%
info
Tool: list_snapshots manifest_parser · 85%
info
Tool: delete_snapshot manifest_parser · 85%
info
Tool: typecheck manifest_parser · 85%
info
Tool: project_health manifest_parser · 85%
info
Tool: batch manifest_parser · 85%
info
Tool: get_recent_errors manifest_parser · 85%
info
Tool: get_output_log manifest_parser · 85%
info
Tool: search_assets manifest_parser · 85%
info
Tool: get_asset_details manifest_parser · 85%
info
Tool: get_asset_thumbnail manifest_parser · 85%
info
Tool: search_materials manifest_parser · 85%
info
Tool: insert_asset manifest_parser · 85%
info
Tool: create_instance manifest_parser · 85%
info
Tool: delete_instance manifest_parser · 85%
info
Tool: clone_instance manifest_parser · 85%
info
Tool: move_instance manifest_parser · 85%
info
Tool: rename_instance manifest_parser · 85%
info
Tool: create_tree manifest_parser · 85%
info
Tool: history manifest_parser · 85%
info
Tool: meshy_generate manifest_parser · 85%
info
Tool: meshy_task manifest_parser · 85%
info
Tool: datastore manifest_parser · 85%
info
Tool: scan_perf manifest_parser · 85%
info
Tool: http_get manifest_parser · 85%
info
Tool: export_sourcemap manifest_parser · 85%
info
Tool: script_source manifest_parser · 85%
info
Tool: grep_scripts manifest_parser · 85%
info
Tool: edit_script_lines manifest_parser · 85%
info
Tool: find_and_replace_in_scripts manifest_parser · 85%
info
Tool: patch_script manifest_parser · 85%
info
Tool: find_duplicates manifest_parser · 85%
info
Tool: blender_process manifest_parser · 85%
info
Tool: blender_run manifest_parser · 85%
info
Tool: git_status manifest_parser · 85%
info
Tool: git_commit manifest_parser · 85%
info
Tool: git_log manifest_parser · 85%
info
Tool: git_diff manifest_parser · 85%
info
Tool: git_restore manifest_parser · 85%
info
Tool: git_recover manifest_parser · 85%
info
Tool: git_show manifest_parser · 85%
info
Tool: git_revert manifest_parser · 85%
info
Tool: git_branch manifest_parser · 85%
info
Tool: git_remote manifest_parser · 85%
info
Tool: git_push manifest_parser · 85%
info
Tool: git_pull manifest_parser · 85%
info
Tool: make_responsive manifest_parser · 85%
info
Tool: scan_responsive manifest_parser · 85%
info
Tool: scan_backdoors manifest_parser · 85%
info
Tool: list_studio_plugins manifest_parser · 85%
info
Tool: get_descendants manifest_parser · 85%
info
Tool: get_tree manifest_parser · 85%
info
Tool: search_objects manifest_parser · 85%
info
Tool: get_services manifest_parser · 85%
info
Tool: format_scripts manifest_parser · 85%
info
Tool: lint_scripts manifest_parser · 85%
info
Tool: cloud_luau manifest_parser · 85%
info
Tool: get_selection manifest_parser · 85%
info
Tool: set_selection manifest_parser · 85%
info
Tool: import_file manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (18) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package 'tufan-blox-bridge' matches no manifest in the repo identity_guard · 70%