The Agent Skills Directory

[SAFE]: The skill documents standard Roblox engine APIs for data persistence. It correctly identifies and provides mitigations for common developer errors that lead to data loss, such as unhandled network failures and race conditions.
[CREDENTIALS_UNSAFE]: The skill explicitly warns against embedding secrets in code, stating 'Treat the API key as a secret; never embed it in client or game code' in the Open Cloud section, which is a best-practice security recommendation.
[INDIRECT_PROMPT_INJECTION]: While the skill involves ingesting data from external sources (Roblox DataStores), it follows safe data handling practices.
Ingestion points: Data enters the environment via store:GetAsync(key) in SKILL.md and references/sessions-and-limits.md.
Boundary markers: The skill instructs users to serialize data into plain tables, which acts as a structural boundary.
Capability inventory: The skill uses SetAsync, UpdateAsync, and IncrementAsync to write data.
Sanitization: Serialization requirements are explicitly detailed in the 'Pitfalls' section to ensure only valid data types are persisted.

roblox-datastores