sui-ts-sdk-backend

Warn

Audited by Snyk on Oct 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required workflow references the Sui documentation MCP server at https://sui.mcp.kapa.ai, which can ingest outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents tools for building backend services and autonomous agents on Sui that construct, sign, and execute transactions, transfer funds, manage keypairs, sponsor transactions, and run transaction pipelines. These actions constitute direct financial operations (transfers, execution, and signing authority). There is no independent service-enforced access control or authentication mechanism described for these transaction execution routes within the instructions; instead, execution relies on programmatic keypairs, KMS, or raw keys supplied by the agent or backend code.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 7, 2026, 04:23 AM
Issues
2