Assess PTB composability risks in Sui smart contracts.
npx skills add https://github.com/PlamenTSV/plamen --skill ptb-composability
Please help me install this Agent Skill. Skill: ptb-composability Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/sui/ptb-composability Command: npx skills add https://github.com/PlamenTSV/plamen --skill ptb-composability
PTB composability in Sui enables atomic multi-command sequences but can introduce security risks if public functions are too broadly exposed or misused across commands, potentially enabling attackers to manipulate state or route assets within a single transaction.
Run a PTB composability audit on your Sui module to identify public functions, potential single-call and value-routing vulnerabilities, and suggested mitigations.
High-intent search queries and answers about installing and using this skill.
Sui PTB composability allows atomic multi-command sequences but introduces security risks if public functions are broadly exposed, enabling attackers to manipulate state or route assets within a single transaction.
Audit Sui PTB composability by inventorying public and entry functions, analyzing single-call assumptions, return-value routing, and multi-step sequencing to reveal attack surfaces and provide actionable mitigations.
Single-call assumptions and return-value routing in Sui PTBs create ordering and routing vulnerabilities, allowing attackers to manipulate state by routing assets through exposed public functions across multiple commands.
Best practices for secure Sui PTB design include implementing strict access control, explicit transfer guarantees, and sequencing checks to prevent unauthorized state manipulation and asset routing across transaction blocks.
Identify exposed protocol functions by inventorying all public and entry functions in your Sui smart contracts, then modeling their multi-step sequencing to determine which functions can be manipulated within PTB workflows.
manuelbrandner85Identify and categorize state-changing entry points in smart contract codebases.
LimaTechnologiesGuide developers in implementing Playwright-based end-to-end tests with Page Object Model.
0x-ShashiMap Sui Move object ownership and lifecycle to surface security vulnerabilities.
asymptotic-codeAutomate formal verification of Move smart contracts on Sui with Boogie and Z3.
