Skip to content
Back to skills

Roblox Data

ASecurity

Design or review Roblox persistence, schemas, session ownership, retries, and cross-server state.

  • 2 stars
  • 0 votes
  • 0 copies
  • 13 views
  • Added September 19, 2026
ai-agents

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 19, 2026

npx -y skills add HungryKelvin123/dstack --skill roblox-data --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Roblox Data?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Roblox Data
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/hungrykelvin123-roblox-data/badge)](https://www.skillsdirectory.com/skills/hungrykelvin123-roblox-data)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: roblox-data
description: "Design or review Roblox persistence, schemas, session ownership, retries, and cross-server state."
---

# Roblox data

Read [`../../references/roblox-engineering.md`](../../references/roblox-engineering.md). Inspect the existing data layer and every writer before choosing a storage pattern.

## Classify the state

- Durable player or game state belongs in DataStoreService.
- Frequent, ephemeral cross-server coordination belongs in MemoryStoreService with explicit expiration and recovery when an entry disappears.
- One-way cross-server notifications may use MessagingService, but the message should identify authoritative state that receivers can reread. Do not make delivery itself the durable record.
- Local caches need an owner, invalidation rule, maximum lifetime, and fallback when the backing service fails.

## Preserve correctness

- Keep service access server-side. Define the key format, serializable schema, schema version, defaults, validation, migration, and ownership of each mutation.
- Use atomic update patterns for concurrent or retry-sensitive writes. Keep update callbacks pure and non-yielding; derive the new value only from their arguments and immutable inputs.
- Make rewards, purchases, and other consequential mutations idempotent. Record the operation identifier with the durable outcome so a retry cannot grant twice.
- Use a session lease when multiple servers could write the same player record. Define acquisition, renewal, release, stale-owner recovery, and what gameplay can continue after ownership is lost.
- Wrap service calls, distinguish retryable failure from invalid data, and use bounded backoff with jitter. Never retry in a tight loop or treat failure as an empty profile.
- Treat shutdown saving as a final attempt, not the only persistence path. Bound shutdown work and make player departure, reconnect, teleport, and server failure explicit lifecycle cases.
- Never enable or exercise live DataStore access through an agent-run Studio test. The user performs Studio validation, preferably against a separate test version when durable data is involved.

## Deliverable

State the service choice, schema and key format, authority, operation lifecycle, concurrency behavior, failure policy, and migration path. Verify pure serializers, validators, migrations, and idempotency locally; give the user a short Studio checklist for runtime behavior.

Files in this skill

  • SKILL.md2.4 KB
  • agents/openai.yaml235 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.