Roblox Best Practices Skill
Description
Framework-agnostic Roblox/Luau best-practices skill for AI agents. Performance, security, data, platform limits, Studio MCP safety, and 22 system blueprints. Installs to 63 agents including Claude Code, Cursor, and Windsurf.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Roblox Best Practices Skill
**A working standard for Roblox and Luau, written for AI coding assistants.**
[](https://github.com/andrian-syh/roblox-best-practices-skill/releases) [](LICENSE) [](https://agentskills.io) [](roblox-best-practices/references/api-currency.md)
It covers how each script is written, how systems are assembled, and where the platform's real limits sit — without assuming anything about your framework, folder layout, or genre.
Works with Claude Code, Cursor, Codex, Gemini, Windsurf, Cline, Zed, and any other tool that reads the [Agent Skills](https://agentskills.io) standard.
irm https://raw.githubusercontent.com/andrian-syh/roblox-best-practices-skill/main/install.ps1 | iex
curl -fsSL https://raw.githubusercontent.com/andrian-syh/roblox-best-practices-skill/main/install.sh | bash
[Installation details](#installation) · [How the skill behaves](#how-the-skill-behaves) · [Reference map](#reference-map) · [Changelog](CHANGELOG.md)
Why this exists
Most coding standards tell an agent what good code looks like. That is the easy half. The hard half is everything an agent gets wrong *because it cannot see your game*: a remote handler that trusts the client, a connection nobody disconnects, a data store call with no answer for what happens after the last retry, an API recalled from training data that was deprecated two years ago.
This skill is the other half.
What it gives your agent
| 22 implementation blueprints | Player data, currency, inventory, trading, developer products, gacha, leaderboards, damage validation, abilities, projectiles, NPC AI at scale, round lifecycles, matchmaking, |
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,