sui-object-model
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill recommends querying the Sui documentation MCP server at
https://sui.mcp.kapa.aifor real-time answers. This establishes an indirect prompt injection surface where the agent processes content from an external source at runtime. 1. Ingestion point:https://sui.mcp.kapa.ai(MCP tool endpoint). 2. Boundary markers: None. 3. Capability inventory: The skill includes Move documentation and examples but no executable scripts; the agent's base tools constitute the capability set. 4. Sanitization: None. - [EXTERNAL_DOWNLOADS]: The skill references established documentation sources including
docs.sui.ioandmove-book.com, and utilizes a well-known documentation search service atkapa.ai. These resources are standard for the developer use-case and are affiliated with the vendor or reputable services.
Audit Metadata