The Agent Skills Directory

[SAFE]: The skill provides best practice guidance for Roblox Lua development, specifically regarding idempotency and atomic data operations. It contains no malicious code, unauthorized network requests, or credential exposure patterns.
[INDIRECT_PROMPT_INJECTION]: The skill describes a pattern for handling external data from the Roblox MarketplaceService callback.
Ingestion points: The receipt table provided by Roblox's ProcessReceipt callback (SKILL.md).
Boundary markers: The implementation uses logic checks (if state.receipts[key]) to isolate and validate transaction processing.
Capability inventory: The skill utilizes DataStore persistence operations (PlayerData.save and PlayerData.sync) which write data to the game's backend.
Sanitization: The code utilizes tostring() to ensure the PurchaseId is treated as a literal string key, preventing potential type-confusion or injection.

roblox-monetization