by boshyxd
Create agentic AI workflows in ROBLOX Studio
# Add to your Claude Code skills
git clone https://github.com/boshyxd/robloxstudio-mcpGuides for using ai agents skills like robloxstudio-mcp.
Last scanned: 5/20/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "hono: Hono missing validation of cookie name on write path in setCookie()",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-20T07:42:42.074Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}robloxstudio-mcp is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by boshyxd. Create agentic AI workflows in ROBLOX Studio. It has 482 GitHub stars.
robloxstudio-mcp failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/boshyxd/robloxstudio-mcp" and add it to your Claude Code skills directory (see the Installation section above).
robloxstudio-mcp is primarily written in TypeScript. It is open-source under boshyxd on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh robloxstudio-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
Hey a few months ago my laptops motherboard was shorted which contained the hardware keys needed to get into my NPM account, due to Node customer support taking forever and also other priorities taking place for me, I will be archiving this project.
I recommend you swap to https://github.com/Chrrxs/robloxstudio-mcp which is a fork of this one that's being actively maintained by Chrrxs.
Connect AI assistants like Claude and Gemini to Roblox Studio
An MCP server that lets AI explore your game structure, read/edit scripts, and perform bulk changes all locally and safely.
Claude Code:
claude mcp add robloxstudio -- npx -y robloxstudio-mcp@latest
Codex CLI:
codex mcp add robloxstudio -- npx -y robloxstudio-mcp@latest
Gemini CLI:
gemini mcp add robloxstudio npx --trust -- -y robloxstudio-mcp@latest
Plugin shows "Connected" when ready.
{
"mcpServers": {
"robloxstudio-mcp": {
"command": "npx",
"args": ["-y", "robloxstudio-mcp@latest"]
}
}
}
Windows users: If you encounter issues, use cmd:
{
"mcpServers": {
"robloxstudio-mcp": {
"command": "cmd",
"args": ["/c", "npx", "-y", "robloxstudio-mcp@latest"]
}
}
}
Ask things like: "What's the structure of this game?", "Find scripts with deprecated APIs", "Create 50 test NPCs in a grid", "Optimize this movement code"
A lighter, read-only version that only exposes inspection tools. No writes, no script edits, no object creation/deletion. Ideal for safely browsing game structure, reviewing scripts, and debugging without risk of accidental changes.
31 read-only tools: get_file_tree, search_files, get_place_info, get_services, search_objects, get_instance_properties, get_instance_children, search_by_property, get_class_info, get_project_structure, mass_get_property, get_script_source, grep_scripts, get_attributes, get_tags, get_tagged, get_selection, get_playtest_output, get_connected_instances, get_descendants, compare_instances, get_output_log, export_build, list_library, search_materials, get_build, search_assets, get_asset_details, get_asset_thumbnail, preview_asset, capture_screenshot
Setup - same plugin, just swap the package name:
Claude:
claude mcp add robloxstudio-inspector -- npx -y robloxstudio-mcp-inspector@latest
Codex:
codex mcp add robloxstudio-inspector -- npx -y robloxstudio-mcp-inspector@latest
Gemini:
gemini mcp add robloxstudio-inspector npx --trust -- -y robloxstudio-mcp-inspector@latest
{
"mcpServers": {
"robloxstudio-mcp-inspector": {
"command": "npx",
"args": ["-y", "robloxstudio-mcp-inspector@latest"]
}
}
}
Windows users: If you encounter issues, use cmd:
{
"mcpServers": {
"robloxstudio-mcp-inspector": {
"command": "cmd",
"args": ["/c", "npx", "-y", "robloxstudio-mcp-inspector@latest"]
}
}
}
Report Issues | DevForum | MIT Licensed