The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the user to run local scripts using the Lune runtime (e.g., lune run scripts/balance.luau). These scripts perform mathematical calculations based on a provided configuration file and output results to the terminal. This is standard behavior for a development tool.
[DATA_EXPOSURE]: The provided scripts read a local JSON configuration file (economy.json) to perform calculations. There is no access to sensitive system files, environment variables, or credentials.
[INDIRECT_PROMPT_INJECTION]: The balance.luau script processes external user-provided data via a JSON configuration file. The script implements a validate function that strictly checks for expected data types (finite numbers) and value ranges (e.g., baseCost >= 1) before processing, effectively mitigating potential injection or schema confusion attacks.
[REMOTE_CODE_EXECUTION]: No patterns of downloading or executing code from remote servers were found. All dependencies are local or part of the Lune standard library.
[SERVER_SECURITY_PATTERNS]: The provided Roblox Luau implementation patterns (e.g., server-patterns.md) follow security best practices for game development, including server-authoritative state management, atomicity in currency operations (preventing race conditions), and data sanitization on load.

roblox-simulator-economy