A malicious script can run game:GetService("Players").LocalPlayer:GetUserId() and send your Roblox security cookie to a hacker's server. They can then:
-- Main loop RunService.RenderStepped:Connect(function() farmTreasure() wait(waitTime) end) build a boat for treasure auto farm script pastebin