sui-publish

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs the agent to query the Sui MCP server at https://sui.mcp.kapa.ai at runtime for up-to-date answers and verification, so fetched remote content would directly influence the agent's responses.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The document is explicitly about interacting with the Sui blockchain: publishing and upgrading packages, estimating and paying gas (SUI tokens), obtaining tokens via faucets, serializing transaction bytes for external signing, creating and executing signed (or multisig) transactions, and controlling upgrade authority (UpgradeCap). It references CLI commands that execute on-chain transactions (sui client publish/upgrade/faucet/balance) and describes signing and multisig workflows. These are specific crypto/blockchain transaction operations (including signing and spending real SUI on Mainnet), i.e., direct financial execution capabilities.