deepbookv3-sdk-balance-manager

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes official Node.js packages from Mysten Labs, such as @mysten/deepbook-v3 and @mysten/sui, which are standard tools for interacting with the Sui blockchain ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to execute high-value blockchain transactions, which presents a surface for potential injection attacks.
  • Ingestion points: User-provided parameters for withdrawFromManager, depositIntoManager, and recipient addresses in SKILL.md.
  • Boundary markers: The skill instructions do not specify any delimiters or warnings to ignore embedded instructions within user data.
  • Capability inventory: The skill has the capability to sign and execute on-chain transactions via the suiClient.signAndExecuteTransaction method.
  • Sanitization: No explicit input validation or sanitization logic is present in the documentation or examples.
  • [COMMAND_EXECUTION]: The skill automates the creation and execution of blockchain transactions, which are used to modify state and transfer assets on the Sui network.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 03:04 PM
Security Audit — agent-trust-hub — deepbookv3-sdk-balance-manager