tabooharmony/roblox-brain

roblox-networking

Use when adding, changing, or auditing RemoteEvents/RemoteFunctions: argument validation, rate limits, server authority, exploit prevention.

소스 보기

사용 방법

설치 명령을 복사하고 자신의 에이전트 환경에 설치하기 전에 소스 패키지를 확인하세요.
필요한 도구, 인증 정보, 지원 환경은 원본 문서에서 확인하세요.
입력과 원하는 산출물을 설명하고 출처와 결과를 대조하세요.

npx skills add https://github.com/tabooharmony/roblox-brain --skill roblox-networking

시작 전 확인

설치에는 모델 구독, API 한도, 파일 접근 권한이 포함되지 않습니다.
별점 수와 설치 수는 활동 지표이며 독립적인 품질·보안 검증이 아닙니다.

원본 Skill 문서

원본 저장소의 제목, 예시, 코드, 표, 링크, 이미지를 유지해 표시합니다.

roblox networking

When to Load

Load when adding a remote, handling untrusted input, adding cooldowns, or assigning authority.

Quick Reference

Every client argument is attacker-controlled; validate type, size, ownership, state, distance, cooldown on the server.
Look up prices, damage, rewards, permissions from server-owned definitions.
Choose the authority model first: Server Authority uses client prediction + server rollback, and is not SetNetworkOwner.
Under Server Authority, simulation input uses InputAction/BindToSimulation() + UseFixedSimulation, not a remote.
Events for most gameplay requests; keep RemoteFunction calls short and bounded.
RemoteEvent for reliable state; not ordered vs property/attribute replication — one explicit channel or version state. UnreliableRemoteEvent only for replaceable data; droppable, 1000-byte cap.
Engine ceiling: each remote type has ~500 FireServer req/s/client, pooled across same-type remotes — a ceiling, not a target.
Measure payload and fire rate under load; budget rate × bytes × recipients; snapshot on join, diffs after.
Hit timestamps are untrusted context, never proof. Bound freshness and validate server history; see full.md §3a.
Typed schemas do not replace security checks. Pin generators and verify generated output in CI.
Check NaN/infinity first (x ~= x, math.abs(x) == math.huge): NaN defeats </>. utf8.len catches malformed UTF-8 that fails a DataStore save.
Serialization: functions arrive nil, metatables stripped, mixed keys mangled, nil truncates tables, tables are copies — validate field by field, share state via server-owned snapshots/ids.
Server Authority needs AuthorityMode = Server + its bundle; misprediction/rollback are normal (full.md).
Rate limits protect the server; validation still rejects invalid requests. Bindables are same-side only: tables copied, metatables stripped, Invoke yields until OnInvoke returns.
Record suspicion with thresholds; never punish one malformed packet.
Edit-mode play: wrap the network layer so RunContext:IsEdit() gets a loopback mock (full.md).