Audit Sui Move modules for generic type and OTW safety risks.
npx skills add https://github.com/PlamenTSV/plamen --skill type-safety-plamentsv
Please help me install this Agent Skill. Skill: type-safety Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/sui/type-safety Command: npx skills add https://github.com/PlamenTSV/plamen --skill type-safety-plamentsv
This Skill addresses the risk of unsafe generic type usage in Sui Move modules by providing a structured analysis workflow that identifies misused type parameters, phantom type misuse, and One-Time Witness (OTW) handling weaknesses during module initialization and currency-related logic.
Review the Sui Move modules for type-parameter misuse and OTW handling to begin a safety assessment.
High-intent search queries and answers about installing and using this skill.
To audit Sui Move modules for generic type parameter misuse, inventory all generic functions and analyze their constraints to detect under- or over-constrained type parameters that could lead to runtime vulnerabilities.
The One-Time Witness (OTW) pattern in Sui Move prevents the forgery of one-time authorities during module initialization. You verify it by auditing witness architectures and OTW handling to ensure no misuse occurs in currency-related logic.
To check phantom type correctness in Sui Move, you review phantom parameters to ensure they do not affect runtime behavior. This prevents phantom type misuse which can compromise the strict type distinctions required for module safety.
Yes, this type safety review covers Coin and Balance integrity in Sui Move. It performs a strict type safety review to maintain type distinctions and accounting integrity for all currency-related logic within your modules.
The structured audit workflow for Sui Move security focuses exclusively on type-parameter abuse, phantom misuse, and insecure OTW handling. It does not cover unrelated smart contract vulnerabilities outside of generic type usage and module visibility.
VMRam95Analyze directory structures and source code to generate hierarchical documentation and architectural maps.
jpoleyGenerate secure patches for code vulnerabilities and output unified diffs.
aptos-labsAudit Move smart contracts for security vulnerabilities using a 7-category checklist.
MystenLabsBuild and test Sui Move packages with environment targeting and coverage.
