semi-trusted-roles

Identifies and classifies security risks from semi-trusted roles in Sui Move protocols.

276|56|Updated Mar 16, 2026

Search Tags:#capabilities #security-audit #attack-scenarios #sui-move #semi-trusted #privilege-model

Ready to run

npx skills add https://github.com/PlamenTSV/plamen --skill semi-trusted-roles

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: semi-trusted-roles
Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/sui/semi-trusted-roles
Command: npx skills add https://github.com/PlamenTSV/plamen --skill semi-trusted-roles

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security analysts identify and quantify risks arising from semi-trusted role capabilities in Sui Move protocols, enabling proactive threat modeling and mitigations.

Core Features & Use Cases

Enumerates and assesses privilege models, including AdminCap-like capabilities, to reveal potential misconfigurations and transfer risks.
Analyzes timing, parameter, sequence, and griefability vectors for semi-trusted roles, with concrete attacker scenarios and mitigation strategies.
Use Case: When auditing a Sui Move-based protocol, run this skill to map all semi-trusted roles, their permissions, and likely abuse paths to prioritize fixes.

Quick Start

Run a structured security analysis of semi-trusted roles in Sui Move protocols and output prioritized mitigations.

Frequently Asked Questions about semi-trusted-roles

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit semi-trusted roles in Sui Move protocols?▼

To audit semi-trusted roles in Sui Move protocols, enumerate capability objects like AdminCap to map permissions, identify trigger patterns, and analyze privilege abuse scenarios to output prioritized mitigation steps.

What are semi-trusted role risks in Sui Move?▼

Semi-trusted role risks in Sui Move involve privilege abuse through capability misconfigurations. These roles can exploit timing, parameter, and sequence vectors to grief the protocol or bypass governance controls if not properly mitigated.

How do I identify AdminCap privilege abuse scenarios in Move?▼

Identify AdminCap privilege abuse scenarios in Move by enumerating capability objects and their preconditions. Analyze parameter manipulation and sequence vectors to map potential attacker paths and specify required remediation steps.

Does this security audit cover griefability and timing vectors for Sui governance?▼

Yes, this security audit covers griefability and timing vectors for Sui governance. It analyzes timing, parameter, and sequence vectors across semi-trusted roles to reveal concrete attacker scenarios and mitigation strategies.

What is the best way to map capability objects and preconditions in Sui Move?▼

The best way to map capability objects and preconditions in Sui Move is to run a structured security analysis. This enumerates all permissions, classifies privilege models, and flags transfer risks for proactive threat modeling.