sui-ts-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to generate TypeScript code that uses
child_process.execSyncto invoke thesuiCLI tool. This is used for building Move packages and extracting bytecode. - [DYNAMIC_EXECUTION]: The skill includes patterns for generating and executing shell commands at runtime based on user-provided variables (e.g.,
packagePath), which represents a dynamic execution surface typical of build tooling. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process data from external sources, including the Sui blockchain and CLI command outputs. This establishes an attack surface where maliciously crafted on-chain data or tool output code potentially influence subsequent agent logic.
- Ingestion points:
client.ledgerService.getObject,client.core.listOwnedObjects, and the parsed output fromexecSync. - Boundary markers: None identified in the provided instructions for handling external blockchain content.
- Capability inventory: The skill allows for command execution via
execSync, transaction execution on the Sui blockchain, and network communication with Sui fullnodes. - Sanitization: No explicit sanitization or validation steps are provided for handling data fetched from the blockchain or CLI before using it in subsequent operations.
Audit Metadata