roblox-best-practices
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a library of architectural patterns and best practices. It includes explicit instructions to enforce server-side validation of all client-supplied data, which is a primary security standard in the target development environment.
- [SAFE]: The skill provides strong guidance against the hardcoding of sensitive credentials, specifically warning against committing .ROBLOSECURITY cookies or API keys to source control and recommending the use of the official Roblox Secrets store.
- [SAFE]: All external tools and libraries referenced (such as Rojo, Wally, Argon, and Azul) are standard industry-standard tools for the Roblox ecosystem. The inclusion of the 'roblox-optimum' tool is recognized as a vendor-owned resource that facilitates adherence to these standards.
- [SAFE]: Instructions regarding dynamic context markers (!ask, !bal, !go) are clearly defined as state-switching tokens for the AI agent's configuration rather than shell command execution patterns.
Audit Metadata