Roblox

Manage Roblox game passes and developer products via Open Cloud API.

Security Scan

The skill's code, runtime instructions, and requested credential (ROBLOX_API_KEY) align with its stated purpose (managing Roblox game passes and developer products) and do not request unrelated secrets or contact unexpected endpoints.

Purpose & Capability

Name/description (Roblox management) match the code and SKILL.md. The only required credential is ROBLOX_API_KEY which is appropriate for calling Roblox Open Cloud APIs. The included modules implement list/get/create/update for passes and products as described.

Instruction Scope

SKILL.md instructs running the provided scripts via 'npx -y bun ${SKILL_DIR}/scripts/cli.ts' and to set ROBLOX_API_KEY. The instructions reference only the included scripts and Roblox endpoints; they do not read other environment variables or system files. Note: the runtime assumes Bun is available (or will be invoked via npx), but the skill's required-binaries metadata lists none.

Install Mechanism

No install spec is present (instruction-only skill). All source files are bundled with the skill; there are no downloads from arbitrary URLs or archive extraction steps. package.json has no runtime dependencies. This is low-risk from an install perspective.

Credentials

Only ROBLOX_API_KEY is required and declared as the primary credential. The code uses the key to set x-api-key headers and to parse ownerId from the key—this is expected and proportionate. No other SECRET/TOKEN env vars or config paths are requested.

Persistence & Privilege

Skill is not always-enabled and does not request persistent system or cross-skill configuration. It does not modify other skills or system settings.

Assessment

This skill appears coherent: it only needs your Roblox Open Cloud API key to call Roblox endpoints and the bundled code implements the advertised features. Before installing: (1) provide an API key with the minimal permissions listed in SKILL.md (game-pass:read/write, developer-product:read/write) and consider restricting it to the specific experiences you intend to manage; (2) review or run the bundled scripts in an isolated environment if you have concerns; (3) note the runtime uses Bun (invoked via npx in the instructions) but Bun is not listed in the skill's required-binaries metadata—ensure your environment can run Bun or npx safely. If you need higher assurance, verify the repository URL in the SKILL.md metadata and compare the shipped code to that upstream source.

Roblox CLI

Manage Roblox game passes and developer products via the Open Cloud API.

Features

• List games owned by your API key
• Manage game passes (list, get, create, update)
• Manage developer products (list, get, create, update)
• JSON output for easy parsing
• Automatic pagination
• Rate limit handling with exponential backoff

Setup

1. Create a Roblox API key in Creator Hub
   • If you land on the OAuth 2.0 Apps page, click "All Tools" then "API Keys"
2. Add the required access permissions:
   • game-pass:read and game-pass:write for game passes
   • developer-product:read and developer-product:write for products
3. Optionally restrict access to specific experiences
4. Set the ROBLOX_API_KEY environment variable

Usage

The skill is invoked via:

npx -y bun ${SKILL_DIR}/scripts/cli.ts [command] [subcommand] [args] [options]

Commands

Games

# List all games owned by API key holder
npx -y bun ${SKILL_DIR}/scripts/cli.ts games list

Game Passes

# List all game passes for a universe
npx -y bun ${SKILL_DIR}/scripts/cli.ts passes list <universeId>

# Get specific game pass details
npx -y bun ${SKILL_DIR}/scripts/cli.ts passes get <universeId> <passId>

# Create new game pass
npx -y bun ${SKILL_DIR}/scripts/cli.ts passes create <universeId> --name "VIP Pass" --price 100 --for-sale true

# Update game pass
npx -y bun ${SKILL_DIR}/scripts/cli.ts passes update <universeId> <passId> --price 50

Developer Products

# List all developer products for a universe
npx -y bun ${SKILL_DIR}/scripts/cli.ts products list <universeId>

# Get specific product details
npx -y bun ${SKILL_DIR}/scripts/cli.ts products get <universeId> <productId>

# Create new product
npx -y bun ${SKILL_DIR}/scripts/cli.ts products create <universeId> --name "Gold Coins" --price 25 --for-sale true

# Update product
npx -y bun ${SKILL_DIR}/scripts/cli.ts products update <universeId> <productId> --price 30

Options

Create/Update Flags:

• --name <name> - Name of the pass/product (required for create)
• --description <desc> - Description text (optional)
• --price <robux> - Price in Robux (required for create)
• --for-sale <true|false> - Whether item is for sale (default: true)

Output Format

All commands return JSON:

Success:

{
  "success": true,
  "data": [...]
}

Error:

{
  "success": false,
  "error": {
    "code": "ERROR_CODE",
    "message": "Error description"
  }
}

Error Codes:

• MISSING_API_KEY - ROBLOX_API_KEY environment variable not set
• INVALID_API_KEY - API key could not be parsed
• INVALID_ARGS - Missing required arguments or invalid flag values
• NOT_FOUND - Requested resource not found
• API_ERROR - Roblox API returned an error
• RATE_LIMITED - Max retries exceeded on 429 responses
• NETWORK_ERROR - Network request failed

Environment Variables

• ROBLOX_API_KEY (required) - Your Roblox Open Cloud API key from Creator Hub

API Permissions

Your API key must have the following permissions:

Feature	Required Permission
Game Passes - Read	game-pass:read
Game Passes - Write	game-pass:write
Developer Products - Read	developer-product:read
Developer Products - Write	developer-product:write

Notes

• Game passes automatically get a placeholder icon (150x150 green PNG)
• All list commands fetch all pages automatically
• Rate limiting is handled with exponential backoff (max 3 retries)
• Delete operations are not supported (Roblox API limitation)
• To disable an item, use --for-sale false in update command

Testing

Run unit tests:

bun test skills/roblox-cli/scripts/__tests__

References

• Roblox Open Cloud API Documentation
• Game Passes API
• Developer Products API
• API Keys Guide