sui-keypair-cryptography
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE] (HIGH): Multiple code snippets demonstrate logging highly sensitive cryptographic material to the console. Evidence in
reference/key-features.mdincludesconsole.log('Mnemonic:', mnemonic);andconsole.log('Encoded private key:', encoded);. Evidence inreference/usage-patterns.mdincludesconsole.log('Secret key bytes:', secretKey);. While intended for demonstration, an AI agent following these patterns would create applications that leak user credentials to logs, terminal history, or telemetry.\n- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill directs the agent to utilize packages and documentation from non-whitelisted organizations. Evidence inSKILL.mdandreference/signature-schemes.mdpoints to the@mysten/suiand@scure/bip39packages and related GitHub repositories. These sources are not included in the trusted organizations list.
Recommendations
- AI detected serious security threats
Audit Metadata