Sui

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user chooses to run setup, it will execute a local script on their machine.

Why it was flagged

The skill tells the user how to run a local shell script as part of setup. The provided script contents are straightforward and purpose-aligned, but running a shell script is still a behavior users should notice.

Skill content
chmod +x setup.sh && ./setup.sh
Recommendation

Review setup.sh before running it, and run it only if you want the local Sui documentation reference copy.

What this means

The local reference material used for answers may change when the remote Sui documentation repository changes.

Why it was flagged

The setup script downloads documentation from a remote GitHub repository and later uses git pull for updates. This is disclosed and aligned with the skill purpose, but it depends on current remote repository content rather than a pinned revision.

Skill content
git clone --depth 1 --filter=blob:none --sparse https://github.com/MystenLabs/sui.git sui-docs
Recommendation

Use the setup script only if you are comfortable pulling current official Sui documentation, and consider pinning a known commit if reproducibility matters.