sui-frontend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill configures and reads data from public Sui fullnode gRPC endpoints (the GRPC_URLS in dapp-kit.ts) and explicitly uses client calls such as client.getOwnedObjects(..., options: { showContent: true }) and client.getBalance(), so the agent ingests untrusted, user-generated on-chain content which can affect transaction-building and UI actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Sui dApp frontend SDK that provides wallet integration and on-chain transaction APIs: connectWallet/disconnectWallet, signTransaction, signPersonalMessage, and signAndExecuteTransaction. It shows how to build Transactions, sign them, and submit/execute them via the Sui client (SuiGrpcClient), and includes examples that send coins, mint NFTs, wait for transaction digests, and otherwise perform on-chain transfers. These are direct crypto/blockchain financial operations (wallet signing and executing transactions), so it grants direct financial execution authority.