sui-publish

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow queries the Sui documentation MCP server (https://sui.mcp.kapa.ai), which is an external service that can ingest and return arbitrary outsider-authored text/content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents operational commands for publishing, deploying, and upgrading Sui Move packages (e.g., sui client publish, sui client upgrade) which handle blockchain transactions and gas consumption on networks including Mainnet, constituting direct financial operations. There are no independent service-layer access controls or authentication checks enforced by the skill or toolchain to restrict these transactions; authorization relies entirely on local key/wallet presence.