ClawHub

Roblox

v1.0.0

Manage Roblox game passes and developer products via Open Cloud API.

⭐ 1· 198·1 current·1 all-time
by@teddyengel
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Roblox management) match the code and SKILL.md. The only required credential is ROBLOX_API_KEY which is appropriate for calling Roblox Open Cloud APIs. The included modules implement list/get/create/update for passes and products as described.
ℹ
Instruction Scope
SKILL.md instructs running the provided scripts via 'npx -y bun ${SKILL_DIR}/scripts/cli.ts' and to set ROBLOX_API_KEY. The instructions reference only the included scripts and Roblox endpoints; they do not read other environment variables or system files. Note: the runtime assumes Bun is available (or will be invoked via npx), but the skill's required-binaries metadata lists none.
✓
Install Mechanism
No install spec is present (instruction-only skill). All source files are bundled with the skill; there are no downloads from arbitrary URLs or archive extraction steps. package.json has no runtime dependencies. This is low-risk from an install perspective.
✓
Credentials
Only ROBLOX_API_KEY is required and declared as the primary credential. The code uses the key to set x-api-key headers and to parse ownerId from the key—this is expected and proportionate. No other SECRET/TOKEN env vars or config paths are requested.
✓
Persistence & Privilege
Skill is not always-enabled and does not request persistent system or cross-skill configuration. It does not modify other skills or system settings.
Assessment
This skill appears coherent: it only needs your Roblox Open Cloud API key to call Roblox endpoints and the bundled code implements the advertised features. Before installing: (1) provide an API key with the minimal permissions listed in SKILL.md (game-pass:read/write, developer-product:read/write) and consider restricting it to the specific experiences you intend to manage; (2) review or run the bundled scripts in an isolated environment if you have concerns; (3) note the runtime uses Bun (invoked via npx in the instructions) but Bun is not listed in the skill's required-binaries metadata—ensure your environment can run Bun or npx safely. If you need higher assurance, verify the repository URL in the SKILL.md metadata and compare the shipped code to that upstream source.

Like a lobster shell, security has layers — review code before you run it.

latestvk9721dshnt43dshwssy9t2y9en82ragh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎮 Clawdis
EnvROBLOX_API_KEY
Primary envROBLOX_API_KEY

Comments