deepbookv3-sdk-balance-manager
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes official Node.js packages from Mysten Labs, such as
@mysten/deepbook-v3and@mysten/sui, which are standard tools for interacting with the Sui blockchain ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to execute high-value blockchain transactions, which presents a surface for potential injection attacks.
- Ingestion points: User-provided parameters for
withdrawFromManager,depositIntoManager, andrecipientaddresses inSKILL.md. - Boundary markers: The skill instructions do not specify any delimiters or warnings to ignore embedded instructions within user data.
- Capability inventory: The skill has the capability to sign and execute on-chain transactions via the
suiClient.signAndExecuteTransactionmethod. - Sanitization: No explicit input validation or sanitization logic is present in the documentation or examples.
- [COMMAND_EXECUTION]: The skill automates the creation and execution of blockchain transactions, which are used to modify state and transfer assets on the Sui network.
Audit Metadata