deepbook-move
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Move contract source code from the Mysten Labs GitHub repository and retrieves supplementary information from the Sui documentation and a dedicated MCP server at sui.mcp.kapa.ai.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to assist with reviewing and debugging Move code, which constitutes an ingestion surface for user-supplied data.
- Ingestion points: User-provided Move source code and integration queries processed by the agent.
- Boundary markers: None explicitly defined within the skill instructions.
- Capability inventory: The skill consists of reference documentation and code signatures; it does not contain executable scripts or tools that perform unauthorized file system or network operations.
- Sanitization: Not applicable to the static documentation provided.
- [SAFE]: No malicious patterns, such as prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation, were detected in the skill content or its metadata. The instructions focus exclusively on official protocol integration patterns.
Audit Metadata