AI Luau script writer for Roblox Studio

What does an AI-written Luau script actually look like?

This is the file Picoo writes into ServerScriptService when you ask for a melee hit that an exploiter cannot fake. It is the whole script, not a fragment. The prompt was “melee damage on hit, server decides, 0.45s cooldown, 18 stud range”.

--!strict
-- ServerScriptService/CombatService.server.lua

local ReplicatedStorage = game:GetService("ReplicatedStorage")
local Players = game:GetService("Players")

local function ensureRemote(name: string): RemoteEvent
    local existing = ReplicatedStorage:FindFirstChild(name)
    if existing and existing:IsA("RemoteEvent") then
        return existing
    end
    local created = Instance.new("RemoteEvent")
    created.Name = name
    created.Parent = ReplicatedStorage
    return created
end

local hitRemote = ensureRemote("HitEnemy")

local COOLDOWN = 0.45
local MAX_RANGE = 18
local DAMAGE = 12

local lastSwing: { [Player]: number } = {}

local function characterRoot(player: Player): BasePart?
    local character = player.Character
    if not character then
        return nil
    end
    return character:FindFirstChild("HumanoidRootPart") :: BasePart?
end

hitRemote.OnServerEvent:Connect(function(player: Player, target: Instance)
    -- The client says who it hit. The server decides whether that was possible.
    if not target:IsA("Model") then
        return
    end

    local now = os.clock()
    if now - (lastSwing[player] or 0) < COOLDOWN then
        return
    end

    local attacker = characterRoot(player)
    local victimRoot = target:FindFirstChild("HumanoidRootPart") :: BasePart?
    local humanoid = target:FindFirstChildOfClass("Humanoid")
    if not (attacker and victimRoot and humanoid) then
        return
    end

    if (attacker.Position - victimRoot.Position).Magnitude > MAX_RANGE then
        return
    end

    lastSwing[player] = now
    humanoid:TakeDamage(DAMAGE)
end)

Players.PlayerRemoving:Connect(function(player: Player)
    lastSwing[player] = nil
end)

Four things in there are the reason it survives contact with a real game. The client sends only which model it hit, so a hacked client cannot send its own damage number. The distance check runs on the server against the attacker's real position. The cooldown is stored per player and cleared on PlayerRemoving, so the table does not grow for the lifetime of the server. And --!strict at the top means Studio's own analyser catches a wrong type before you ever press play.

A general chat model will write something that looks close to this. What it usually leaves out is the cleanup line and the server-side range check, because nothing in a chat window tells it your RemoteEvent is reachable by anyone who opens an exploit menu.

Can AI write Roblox scripts that run without editing?

Often, and the reason is where the checking happens. Before a script lands in your place, Picoo runs it through the Luau compiler for parse errors and checks it for the Roblox API mistakes that only blow up at runtime: RemoteFunction.OnServerFunction instead of OnServerInvoke, a Model:SetPrimaryPart method that does not exist, Humanoid.PrimaryPart instead of HumanoidRootPart. Errors go back to the AI to fix.

When a check fails the script does not reach you half-written. Picoo rewrites and checks again, and you see the version that passed.

Does it work on a game you have already started?

That is the normal case. Picoo reads the place hierarchy on every prompt, so it knows which services are loaded, what is sitting in Workspace, and which scripts you have open. Ask it to add validation to a RemoteEvent you wrote last month and it patches that file rather than writing a second one beside it.

It also reads the Studio output window. Paste nothing: when a script you just ran throws, the error comes back into the chat with the line it came from, and the next prompt starts from there.

Frequently asked