| name | roblox-code-review |
| description | Use when reviewing Roblox or Luau code for security, performance, monetization, data persistence, or architecture risks. |
| last_reviewed | "2026-07-04T00:00:00.000Z" |
| sources | ["original"] |
Code Review
Review Roblox projects with security, performance, and monetization lenses. Apply relevant lenses based on what changed — not all every time.
When to Load
- User asks for code review on Roblox/Luau code
- User asks to audit security, performance, networking, monetization, or data persistence
- User asks about Roblox best practices for remotes, data saving, or code organization
Quick Reference
8-Step Review
- Project Scan — scripts, folders, naming, Rojo/Wally/Studio
- Organization — correct services, PascalCase modules, no orphans
- Code Quality —
wait()→task.wait(), spawn()→task.spawn(), globals
- Architecture — single responsibility, no circular requires, server/client split
- Security — validate remotes server-side, no client-trusted state, rate-limit
- Performance — consolidate Heartbeat, cache services, disconnect events
- Report — Grade A-F. Severity: Critical/High/Medium/Low
- Refactor — Immediate → Short-term → Long-term
Routing — Load These Skills for Each Lens
| Lens | Load |
|---|
| Gotchas & footguns | roblox-sharp-edges |
| Security audit | roblox-security |
| Remote validation | roblox-networking |
| Data persistence | roblox-data |
| Monetization | roblox-monetization |
| Performance | roblox-performance |
| Luau correctness | roblox-luau-core, roblox-luau-types |
Output Format
- READY / NOT READY
- Critical blockers
- Warnings
- Pass count/%
- Failed items + fixes
📖 Full reference: references/full.md