[Asset Marketplace] Frost.Shop

Plugin Marketplace Button

About

What is Frost.Shop?

Frost.Shop is a development marketplace, where you can buy all sorts of assets, ranging from scripts, to models, or even plugins! Choose from a wide variety of creators, or potentially even become a seller yourself! (Applications opening soon.) Frost.Shop is built into just 1 plugin, so everything is easy to access!

How does Frost.Shop Operate?

When you purchase an item, we will take a small cut and the rest is given to the original seller! They can choose to cashout their credits at anytime, as long as they match the requirements.

Is it secure?

Of course! Frost.Shop is secure for both the buyer and the seller, as we never store the assets locally, so it is very secure when it comes to asset storage.

Why is the plugin trying to access “api.frostshop.dev” or another link?

To ensure security when using Frost.Shop, we must connect to an external API to process requests. We use pastebin to store product info, so you don’t have to update the plugin whenever there’s new items, the plugin will refresh itself.

How do I install the plugin?

A button to install the plugin is provided at the top and bottom of this post.

Extra Images of the plugin:




Plugin Marketplace Button

I am open to hear your opinion and ideas, you can suggest something underneath this post in the comments!

ADDRESSING SECURITY CONCERNS:
We currently use loadstring ONLY because we need it to load bought assets into your game, (assets are serialzed into code to store as text) and to load the assets for sale. We will have an api endpoint for the 2nd thing soon.
Loadstring is rarely harmful, and if I were to insert any malicious scripts into your game it would require the permissions to edit / add scripts, guarded by PluginSecurity.

Disclaimer: This is posted on an alt because when browsing the devforum, I didn’t realise I was logged into this account and therefore got access on this account by accident. My main account is frostfairgr10, which is the owner of the group that the plugin is under.

10 Likes

How do the credits work? Since I wanted to see how it works and all and I bought 5 of them, how long does it take to go into the plugin?

3 Likes

Hey! Thanks for purchasing credits, it should take under 30 seconds to go into the plugin, then you can use those credits to buy things!

1 Like

It still says I have 0, I also tried to verify but it said that I don’t have any assets.

1 Like

let me check the database, just a second (issue was resolved)

what exactly makes this different from the current toolbox? seems like the toolbox with extra steps and you have to pay for stuff? plus are you checking for malicious items? I mean I can see if something that shouldnt have a script has scripts in the toolbox- can I see that here?

4 Likes

hey, thanks for your concerns, here are the answers to your questions:
with your reasoning, there is no point in selling assets because they are free inside the toolbox. people prefer paying over free items for the following reasons:

  • better quality
  • less overused
  • supporting creators

all assets added to our marketplace go through strict moderation processes, where we manually check to see if there is malicious content. (apologies for my poor grammar as I’m typing this on a phone.)

so youre paying the creators who upload? also unless its highquality assets most people arent going to use them and whats stopping people from just uploading assets from frost to the regular toolbox? just seems like youve overcomplicated the toolbox without making it better

1 Like

:question:




1 Like

backwards loadstring lowkey sketchy af, dont use this plugin

7 Likes

I think that’s so they can update the products without pushing out an actual plugin update

2 Likes

if you read the code from the pastebin, you can see it says return before the table, using loadstring just copies that table from a string into an actual table.

This is completely different, parcel is small individual hubs, this is one big marketplace. It would be helpful if you gave reasons why it’s better, instead of just saying that. (although you cant really compare them since they are so different)

1 Like

we use loadstring 2 times: to update assets and to load assets, assets are stored in an external databade in the form of text / lua code, which we then loadstring. please read the code properly before making these allegations.

The plugin is good, but also glitchy at the same time, The plugin’s main UI is good, and the plugin itself does work and you can buy assets.

1 Like

With the uploading it to toolbox, this will always happen. Even with assets you get paid on websites, you can’t really avoid it. Also the toolbox won’t show it since you have to be verified (driver’s license and other) to be fully shown on the toolbox, without the verification you have to do another step clicking the “Include unverified creators” which most people don’t even know about.

1 Like

Yes, but why? If you’re only using it for a table, you should be using HTTPService:JsonDecode() (which you’re already using in the plugin). Using loadstring for it only opens up potential security flaws. Not to mention that you’re using an obfuscation technique to get around static analysis which just makes it seem suspicious.

i could use json tables, but i would still need loadstring for the assets. (what potential security flaws?)

:scream::scream::cold_sweat::cold_sweat:, for what are you using pastebin.com for??? Are you trying to run a malicious script on my PC?

1 Like

we use pastebin to store assets, so we dont have to make a plugin update just to add new assets.