Sui
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: sui Version: 1.1.0 The skill is designed to provide knowledge about the Sui blockchain. The `SKILL.md` instructs the agent to execute `setup.sh` to clone official Sui documentation from `https://github.com/MystenLabs/sui.git` using standard `git` commands, and then use `rg` (ripgrep) to search these local references. All actions are clearly aligned with the stated purpose of creating and searching a knowledge base, with no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection beyond the stated purpose, or obfuscation.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user chooses to run setup, it will execute a local script on their machine.
The skill tells the user how to run a local shell script as part of setup. The provided script contents are straightforward and purpose-aligned, but running a shell script is still a behavior users should notice.
chmod +x setup.sh && ./setup.sh
Review setup.sh before running it, and run it only if you want the local Sui documentation reference copy.
The local reference material used for answers may change when the remote Sui documentation repository changes.
The setup script downloads documentation from a remote GitHub repository and later uses git pull for updates. This is disclosed and aligned with the skill purpose, but it depends on current remote repository content rather than a pinned revision.
git clone --depth 1 --filter=blob:none --sparse https://github.com/MystenLabs/sui.git sui-docs
Use the setup script only if you are comfortable pulling current official Sui documentation, and consider pinning a known commit if reproducibility matters.