bit-shift-safety

Analyze unvalidated bit-shift operations in Sui Move code to prevent VM aborts.

276|56|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/PlamenTSV/plamen --skill bit-shift-safety
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bit-shift-safety
Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/sui/bit-shift-safety
Command: npx skills add https://github.com/PlamenTSV/plamen --skill bit-shift-safety

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies and analyzes unvalidated bit-shift operations in Move modules to prevent Move VM aborts.

Core Features & Use Cases

  • Shift Operation Inventory: Enumerate all bit shift sites across Move modules.
  • Abort Impact Analysis: Evaluate the risk and impact of unvalidated shifts on transactions.
  • Cross-Function Propagation: Trace how shift amounts could reach the critical bit width across function calls.

Quick Start

Run a full scan of Sui Move sources to detect and report unvalidated bit-shift usage.

Frequently Asked Questions about bit-shift-safety

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent Move VM aborts caused by unvalidated bit-shift operations?

To prevent Move VM aborts, you must identify and analyze unvalidated bit-shift operations in Sui Move code. This involves inventorying all shift sites and evaluating their abort risk to ensure shift amounts do not exceed critical bit widths.

What is the best way to perform a static analysis security audit on Sui Move?

A static analysis security audit on Sui Move requires scanning modules to detect unvalidated bit-shift usage. You inventory shift operations, classify their sources, and trace cross-function propagation to evaluate transaction abort risks.

How does cross-function propagation affect bit-shift vulnerabilities in Move modules?

Cross-function propagation allows unvalidated shift amounts to pass through function calls and reach critical bit widths in Sui Move. Tracing this data flow is essential to accurately evaluate abort impact and identify hidden vulnerabilities.

Does this bit-shift safety analysis work with both Move modules and scripts?

Yes, bit-shift safety analysis applies across both Move modules and scripts within Sui-based projects. It inventories explicit shifts in public or sensitive functions to evaluate abort risk across the entire project.

How do I inventory all bit shift sites in a Sui Move project?

You inventory bit shift sites in a Sui Move project by running a full static analysis scan of the source code. This process enumerates all explicit shift operations in public or sensitive functions and records findings with traceability.

Why do unvalidated bit-shift operations cause Move VM aborts?

Unvalidated bit-shift operations cause Move VM aborts when the shift amount exceeds the critical bit width of the data type. Static analysis identifies these unvalidated shifts and evaluates their risk to prevent transaction failures.