Sui Smart Contract Security Scanner

Map Sui Move object ownership and lifecycle to surface security vulnerabilities.

56|9|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill sui-smart-contract-security-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Sui Smart Contract Security Scanner
Source: https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS/tree/main/skills/sui-scanner
Command: npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill sui-smart-contract-security-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditing Sui Move smart contracts requires understanding the object-centric ownership model and identifying vulnerabilities related to owned, shared, immutable, and wrapped objects, dynamic fields, and transfer policies.

Core Features & Use Cases

  • Detects and reason about Sui object ownership types (owned, shared, immutable, wrapped) and their security implications.
  • Provides guidance on Sui-specific patterns, dynamic fields, and object lifecycle for thorough audits.
  • Use Case: Analysts can audit a Sui module by mapping object ownership, validating OTW usage, and enforcing correct transfer semantics.

Quick Start

Run the Sui Scanner against a Sui Move project to surface object-model security issues and policy violations.

Frequently Asked Questions about Sui Smart Contract Security Scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Sui Move contracts for object ownership vulnerabilities?

To audit Sui Move contracts for object ownership vulnerabilities, you need to map owned, shared, immutable, and wrapped objects to identify security implications and lifecycle risks across modules.

What is object-security pattern detection in Sui Move?

Object-security pattern detection in Sui Move is the process of recognizing object ownership types and dynamic fields to enforce OTW usage, transfer policies, and dynamic-field bounds during smart contract audits.

How do I analyze upgrade-cap risk in Sui Move modules?

You analyze upgrade-cap risk in Sui Move modules by mapping object ownership semantics and lifecycle workflows to identify vulnerabilities related to transfer policies and dynamic fields.

Does this Sui scanner check dynamic-field bounds and transfer policies?

Yes, the Sui scanner checks dynamic-field bounds and transfer policies by parsing Move modules and enforcing correct transfer semantics and object lifecycle rules during security audits.

What's the best way to validate OTW usage in Sui Move audits?

The best way to validate OTW usage in Sui Move audits is to run a scanner that parses Move modules, recognizes object ownership types, and enforces One-Time-Witness rules across workflows.