sui-ts-sdk-backend
Warn
Audited by Snyk on Oct 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow references the Sui documentation MCP server at https://sui.mcp.kapa.ai, which can ingest outsider-authored free text.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill documents tools for building backend services and autonomous agents on Sui that construct, sign, and execute transactions, transfer funds, manage keypairs, sponsor transactions, and run transaction pipelines. These actions constitute direct financial operations (transfers, execution, and signing authority). There is no independent service-enforced access control or authentication mechanism described for these transaction execution routes within the instructions; instead, execution relies on programmatic keypairs, KMS, or raw keys supplied by the agent or backend code.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata