The Agent Skills Directory

[SAFE]: The skill serves as a security best-practice guide for Roblox development, focusing on the "never trust the client" principle.
[SAFE]: The provided Luau code snippets demonstrate robust validation techniques, such as using math.isfinite to prevent NaN injection and utf8.len to validate string data before storage.
[SAFE]: Correct implementation of security-critical platform features is shown, including the use of HttpService:GetSecret for API key management and Players:BanAsync for exploit mitigation.
[SAFE]: The references/checklist.md file provides a structured framework for auditing game code for common vulnerabilities like insufficient rate limiting or relaying unvalidated remote events.

roblox-security