sui-move-project

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to query the Sui documentation MCP server at runtime (https://sui.mcp.kapa.ai) for up-to-date answers and verification, so remote content can directly influence agent prompts/responses.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation includes explicit Sui blockchain commands and onchain package management actions (e.g., installing/using the Move Registry, mvr add, and references to sui client publish and Published.toml tracking published addresses). These are blockchain-specific operations that involve on-chain publishing/transactions (signing/sending), so it contains crypto/blockchain execution capabilities per the criteria.