Mode d’emploi
- Copiez la commande et examinez le paquet avant de l’installer dans votre environnement agent.
- Consultez le document original pour les outils, identifiants et environnements requis.
- Décrivez les entrées et le livrable souhaité ; comparez la sortie aux sources.
npx skills add https://github.com/tabooharmony/roblox-brain --skill roblox-networkingAvant de commencer
- L’installation n’inclut ni abonnement au modèle, ni quota API, ni accès aux fichiers.
- Étoiles et installations reflètent l’activité, pas un test indépendant de qualité ou de sécurité.
Document Skill original
Rendu depuis le dépôt source en conservant titres, exemples, code, tableaux, liens et images.
roblox networking
When to Load
Load when adding a remote, handling untrusted input, adding cooldowns, or assigning authority.
Quick Reference
- Every client argument is attacker-controlled; validate type, size, ownership, state, distance, cooldown on the server.
- Look up prices, damage, rewards, permissions from server-owned definitions.
- Choose the authority model first: Server Authority uses client prediction + server rollback, and is not
SetNetworkOwner. - Under Server Authority, simulation input uses
InputAction/BindToSimulation()+UseFixedSimulation, not a remote. - Events for most gameplay requests; keep
RemoteFunctioncalls short and bounded. RemoteEventfor reliable state; not ordered vs property/attribute replication — one explicit channel or version state.UnreliableRemoteEventonly for replaceable data; droppable, 1000-byte cap.- Engine ceiling: each remote type has ~500 FireServer req/s/client, pooled across same-type remotes — a ceiling, not a target.
- Measure payload and fire rate under load; budget rate × bytes × recipients; snapshot on join, diffs after.
- Hit timestamps are untrusted context, never proof. Bound freshness and validate server history; see full.md §3a.
- Typed schemas do not replace security checks. Pin generators and verify generated output in CI.
- Check NaN/infinity first (
x ~= x,math.abs(x) == math.huge):NaNdefeats</>.utf8.lencatches malformed UTF-8 that fails a DataStore save. - Serialization: functions arrive
nil, metatables stripped, mixed keys mangled,niltruncates tables, tables are copies — validate field by field, share state via server-owned snapshots/ids. - Server Authority needs
AuthorityMode = Server+ its bundle; misprediction/rollback are normal (full.md). - Rate limits protect the server; validation still rejects invalid requests. Bindables are same-side only: tables copied, metatables stripped,
Invokeyields untilOnInvokereturns. - Record suspicion with thresholds; never punish one malformed packet.
- Edit-mode play: wrap the network layer so
RunContext:IsEdit()gets a loopback mock (full.md).
Need details? references/full.md has validation, throttling, and mock patterns.
