andrian-syh

Roblox Best Practices Skill — Security skill for Claude Code

Security community

Framework-agnostic Roblox/Luau best-practices skill for AI agents.

How to install Roblox Best Practices Skill

This entry records only its repository, not the path inside it, so there is no exact command to give. Open andrian-syh/roblox-best-practices-skill and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Roblox Best Practices Skill does

Framework-agnostic Roblox/Luau best-practices skill for AI agents. Performance, security, data, platform limits, Studio MCP safety, and 22 system blueprints. Installs to 63 agents including Claude Code, Cursor, and Windsurf.

Alternatives in Security

T3mp3st — autonomous red teaming platform; multi-agent offensive-security meta-harness 5.7k ★
ThinkWatch — Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII 817 ★
Senior Engineering Partner — A stack-agnostic Claude Code skill: strict code reviewer, pair programmer, debugger, and mentor (Python/Bash/A 148 ★

README

Roblox Best Practices Skill

**A working standard for Roblox and Luau, written for AI coding assistants.**

[![Version](https://img.shields.io/badge/version-v1.18.2-0a7bbb)](https://github.com/andrian-syh/roblox-best-practices-skill/releases) [![License](https://img.shields.io/badge/license-MIT-green)](LICENSE) [![Agent Skills](https://img.shields.io/badge/standard-Agent%20Skills-8a3ffc)](https://agentskills.io) [![Engine](https://img.shields.io/badge/engine-735-lightgrey)](roblox-best-practices/references/api-currency.md)

It covers how each script is written, how systems are assembled, and where the platform's real limits sit — without assuming anything about your framework, folder layout, or genre.

Works with Claude Code, Cursor, Codex, Gemini, Windsurf, Cline, Zed, and any other tool that reads the [Agent Skills](https://agentskills.io) standard.

irm https://raw.githubusercontent.com/andrian-syh/roblox-best-practices-skill/main/install.ps1 | iex

curl -fsSL https://raw.githubusercontent.com/andrian-syh/roblox-best-practices-skill/main/install.sh | bash

[Installation details](#installation) · [How the skill behaves](#how-the-skill-behaves) · [Reference map](#reference-map) · [Changelog](CHANGELOG.md)

Why this exists

Most coding standards tell an agent what good code looks like. That is the easy half. The hard half is everything an agent gets wrong *because it cannot see your game*: a remote handler that trusts the client, a connection nobody disconnects, a data store call with no answer for what happens after the last retry, an API recalled from training data that was deprecated two years ago.

This skill is the other half.

What it gives your agent


22 implementation blueprints	Player data, currency, inventory, trading, developer products, gacha, leaderboards, damage validation, abilities, projectiles, NPC AI at scale, round lifecycles, matchmaking,