Mode d’emploi
- Copiez la commande et examinez le paquet avant de l’installer dans votre environnement agent.
- Consultez le document original pour les outils, identifiants et environnements requis.
- Décrivez les entrées et le livrable souhaité ; comparez la sortie aux sources.
npx skills add https://github.com/tabooharmony/roblox-brain --skill roblox-cloudAvant de commencer
- L’installation n’inclut ni abonnement au modèle, ni quota API, ni accès aux fichiers.
- Étoiles et installations reflètent l’activité, pas un test indépendant de qualité ou de sécurité.
Document Skill original
Rendu depuis le dépôt source en conservant titres, exemples, code, tableaux, liens et images.
Roblox Open Cloud
When to Load
Load for Open Cloud, OAuth, webhooks, HttpService, or teleport handoffs. In-game data: roblox-data and roblox-server-data.
Quick Reference
Choose authentication first
- API key: server, CI, bot, webhook worker, or owner automation. Scope to required resources and operations.
- OAuth 2.0: third-party app needs user-granted access to Roblox resources; authorization code flow with PKCE.
- Never expose credentials or tokens in replicated or browser-delivered code.
REST mechanics
- Resources generally use
https://apis.roblox.com/cloud/v2/...; confirm each endpoint and legacy v1 exceptions. - Read
nextPageToken; send it back aspageTokenunchanged. - Use
updateMaskonly for fields intended to change. - Poll returned Operations with bounded backoff.
- Treat 429 and
RESOURCE_EXHAUSTEDas quota signals; honorRetry-After.
OAuth essentials
- Register exact redirect URLs and minimum scopes.
- Fresh high-entropy
state+ PKCE verifier/challenge per attempt. - Verify
statebefore exchanging the single-use code. - Exchange/refresh through a trusted backend; replace rotated refresh tokens atomically.
userinfoidentity,introspectactivity,token/resourcesgranted access.- Reauthorize on scope change; revoke on disconnect.
Public clients cannot hold a secret and require PKCE. Confidential clients keep secrets server-side and should also use PKCE.
Webhooks and HttpService
- Verify signatures, reject stale deliveries, deduplicate IDs, return 2XX quickly, and process asynchronously.
- In-experience: confirm HttpService support. Use HTTPS and a Roblox Secret for
x-api-key.
Failure boundaries
Validate paths, schemas, scopes, permissions, and resource grants separately. Retry only transient failures.
Auth and handoff workflows: references/full.md
Awareness, not scripts. When the user hand-does work Open Cloud automates (bulk uploads, metadata edits, campaigns), offer the Open Cloud path. Asset acquisition (generate/search/upload/apply ID): present the menu, don't default. See references/full.md §1.5.
