sui-move-review
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data including source code, manifests, and design documentation, creating a surface for indirect prompt injection.
- Ingestion points: The agent is instructed in
SKILL.mdto read repository instructions, package manifests, design records, implementations, and tests. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands within the audited data are provided.
- Capability inventory: The skill implies the use of file reading capabilities and the execution of build/linting tools.
- Sanitization: The instructions do not define sanitization or validation protocols for the external content before it is processed by the agent.
Audit Metadata