How to use
- Copy the installation command and review the source package before installing it in your own agent environment.
- Check the source document for required tools, credentials and supported hosts.
- Describe your input and desired deliverable; review the output against the source material.
npx skills add https://github.com/tabooharmony/roblox-brain --skill roblox-networkingBefore you start
- Installation does not include a model subscription, API allowance or permission to access your files.
- Repository stars and installation counts describe activity, not an independent quality or security test.
Original skill document
Rendered from the source repository. Headings, examples, code, tables, links, and referenced images are preserved.
roblox networking
When to Load
Load when adding a remote, handling untrusted input, adding cooldowns, or assigning authority.
Quick Reference
- Every client argument is attacker-controlled; validate type, size, ownership, state, distance, cooldown on the server.
- Look up prices, damage, rewards, permissions from server-owned definitions.
- Choose the authority model first: Server Authority uses client prediction + server rollback, and is not
SetNetworkOwner. - Under Server Authority, simulation input uses
InputAction/BindToSimulation()+UseFixedSimulation, not a remote. - Events for most gameplay requests; keep
RemoteFunctioncalls short and bounded. RemoteEventfor reliable state; not ordered vs property/attribute replication — one explicit channel or version state.UnreliableRemoteEventonly for replaceable data; droppable, 1000-byte cap.- Engine ceiling: each remote type has ~500 FireServer req/s/client, pooled across same-type remotes — a ceiling, not a target.
- Measure payload and fire rate under load; budget rate × bytes × recipients; snapshot on join, diffs after.
- Hit timestamps are untrusted context, never proof. Bound freshness and validate server history; see full.md §3a.
- Typed schemas do not replace security checks. Pin generators and verify generated output in CI.
- Check NaN/infinity first (
x ~= x,math.abs(x) == math.huge):NaNdefeats</>.utf8.lencatches malformed UTF-8 that fails a DataStore save. - Serialization: functions arrive
nil, metatables stripped, mixed keys mangled,niltruncates tables, tables are copies — validate field by field, share state via server-owned snapshots/ids. - Server Authority needs
AuthorityMode = Server+ its bundle; misprediction/rollback are normal (full.md). - Rate limits protect the server; validation still rejects invalid requests. Bindables are same-side only: tables copied, metatables stripped,
Invokeyields untilOnInvokereturns. - Record suspicion with thresholds; never punish one malformed packet.
- Edit-mode play: wrap the network layer so
RunContext:IsEdit()gets a loopback mock (full.md).
Need details? references/full.md has validation, throttling, and mock patterns.
