walrus-sites
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to run standard CLI commands for building and deploying sites, such as
npm run buildandsite-builder deploy. These are appropriate for the skill's purpose of automating deployment workflows. - [EXTERNAL_DOWNLOADS]: Installation of required tools like
site-builderandwalrusis directed throughsuiup, the standard installer for the ecosystem. Docker images for the portal are pulled from the official vendor repository on Docker Hub. - [REMOTE_CODE_EXECUTION]: The skill mentions executing a helper script (
scripts/local-docker-portal.sh) after cloning the vendor's official repository. This is a standard method for setting up the local development environment provided by the service. - [CREDENTIALS_UNSAFE]: While the skill discusses the use of Sui private keys and mnemonics for transaction signing, it explicitly recommends using environment secrets (e.g., GitHub Secrets) to handle these sensitive values securely during CI/CD processes.
Audit Metadata