[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-sui-sui-move-security-review":3,"mdc--1wu7gv-key":39,"related-org-sui-sui-move-security-review":552,"related-repo-sui-sui-move-security-review":716},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":12,"stars":25,"repoUrl":26,"updatedAt":27,"license":28,"forks":29,"topics":30,"repo":34,"sourceUrl":37,"mdContent":38},"sui-move-security-review","audit Sui Move smart contracts","Use when auditing, reviewing, or hunting for vulnerabilities in Move code on Sui. Applies equally to source code (.move files) and to disassembly of compiled bytecode (on-chain packages). A checklist of invariants whose VIOLATION causes exploitable bugs: access control & capabilities, struct abilities & type safety, object lifecycle & ownership, shared-object and PTB attack surface, dynamic fields & collections, arithmetic & coins, init\u002FOTW\u002Fpackage upgrades, hot-potato composability, time & on-chain randomness, and test-only code leakage. Trigger on \"audit this Move code\", \"find vulnerabilities in this Sui contract\", \"security review\", \"is this package safe?\", \"I suspect there's a bug in X\", \"something is wrong with this contract\", or when reasoning about whether a Move function can be abused.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},"sui","Sui (Mysten Labs)","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fsui.png","MystenLabs",[13,17,19,22],{"name":14,"slug":15,"type":16},"Security","security","tag",{"name":18,"slug":8,"type":16},"Sui",{"name":20,"slug":21,"type":16},"Code Review","code-review",{"name":23,"slug":24,"type":16},"Smart Contracts","smart-contracts",7724,"https:\u002F\u002Fgithub.com\u002FMystenLabs\u002Fsui","2026-07-16T06:02:55.691149",null,11689,[31,32,33,24],"blockchain","distributed-ledger-technology","move",{"repoUrl":26,"stars":25,"forks":29,"topics":35,"description":36},[31,32,33,24]," Sui, a next-generation smart contract platform with high throughput, low latency, and an asset-oriented programming model powered by the Move programming language","https:\u002F\u002Fgithub.com\u002FMystenLabs\u002Fsui\u002Ftree\u002FHEAD\u002Fcrates\u002Fsui-prompt\u002Fsrc\u002Fskills\u002Fsui-move-security-review","---\nname: sui-move-security-review\ndescription: >\n  Use when auditing, reviewing, or hunting for vulnerabilities in Move code on Sui. Applies\n  equally to source code (.move files) and to disassembly of compiled bytecode (on-chain\n  packages). A checklist of invariants whose VIOLATION causes exploitable bugs: access\n  control & capabilities, struct abilities & type safety, object lifecycle & ownership,\n  shared-object and PTB attack surface, dynamic fields & collections, arithmetic & coins,\n  init\u002FOTW\u002Fpackage upgrades, hot-potato composability, time & on-chain randomness, and\n  test-only code leakage. Trigger on \"audit this Move code\", \"find vulnerabilities in this\n  Sui contract\", \"security review\", \"is this package safe?\", \"I suspect there's a bug in\n  X\", \"something is wrong with this contract\", or when reasoning about whether a Move\n  function can be abused.\n---\n\n# Move Security Review (on Sui)\n\n> **Self-bootstrap (any AI agent):** this skill is bundled inside the `sui` binary. **For\n> comprehensive audits, read every reference file in this bundle** — default to\n> `sui prompt skill sui-move-security-review --all` for a one-shot load of all of them.\n> Incremental loading is possible but should be the last resort. Even then, do not skip any files or rules to avoid creating blind spots. The detection heuristics, severity ratings, and exploit\n> sketches live in those per-category files.\n> This skill belongs to one or more categories — run `sui prompt categories` to see them\n> and `sui prompt category \u003Cname>` to read the category's workflow. No filesystem install\n> is required — the binary is self-contained.\n\n> Offensive counterpart to the constructive Move skills — each rule = violated invariant\n> with detection heuristic, severity, and exploit sketch.\n\n> **Sources.** Per-rule citation `MystenLabs\u002Fskills → \u003Cfile>`. **[+domain]** = established\n> auditing practice not in upstream skills (high-yield, easy to miss — e.g. SM-A3, SM-B4).\n> Verify on-chain facts against [docs.sui.io](https:\u002F\u002Fdocs.sui.io),\n> [move-book.com](https:\u002F\u002Fmove-book.com), or framework source.\n\n> **Representation.** The catalog is stated in Move semantics. Use `.move` files when\n> the target is a source repository. Use disassembly (`.asm`) when the target is a\n> deployed on-chain package: fetch bytecode with `sui-and-move-tools`, disassemble it,\n> then walk rules with `auditing-bytecode.md` as the per-rule opcode-signal bridge.\n\n## How to audit with this skill\n\n1. **Map the attack surface first.** List every `public` and `entry` function (these are the only\n   externally reachable entrypoints), every `*Cap`\u002Fwitness\u002FOTW type, every shared object, and\n   every struct's ability set. PTB callers control argument order and supply arbitrary inputs —\n   treat all entrypoints as adversarial.\n2. **Walk the catalog by category** (A–M). For each rule, run the `Detect` heuristic\n   against the code representation.\n   - **A grep hit is a *candidate*, not a finding.** Confirm the invariant is actually\n     broken before reporting.\n   - **A grep miss is NOT proof of absence — walk the candidate set explicitly.** Many\n     rules detect the *absence* of a guard, check, or invariant — either purely (SM-A2,\n     A3, A6, B4, D1, E4, G2) or as confirmation on top of a candidate-presence check\n     (SM-C1, C3, C4, F2, G1, M1). For these the bug shape is \"X is missing where it\n     should be\"; an empty grep often means *\"X is missing everywhere\"*. Identify the\n     rule's candidate set (privileged call sites for SM-A6; `&mut SharedT`-mutating\n     `public`\u002F`entry` fns for SM-A2; cap-gated fns for SM-A3; `dynamic_field::borrow*` \u002F\n     `bag::borrow*` \u002F `table::borrow*` sites for SM-E4; `object::delete` sites for SM-C1;\n     etc.) and for each candidate check whether the required guard is present — reason\n     about dataflow, not the textual presence of `assert!` somewhere in the file.\n3. **Report findings keyed to the rule ID** (e.g. `SM-A3`) with: severity, the offending\n   location (`file:line`), why the invariant is violated, and the concrete exploit. Distinguish\n   *exploitable* from *defense-in-depth*.\n4. **Re-derive, don't trust naming.** A struct named `AdminCap` may be safe; an unnamed struct\n   may be the real authority. Reason from abilities and from who can construct\u002Fobtain a value.\n\n## Severity legend\n\n- **Critical** — direct loss\u002Ftheft of funds or objects, unlimited mint, total authority seizure, or permanent asset lock.\n- **High** — privilege escalation, invariant bypass, or DoS of core functionality under realistic conditions.\n- **Medium** — conditional\u002Flimited-impact issues, information disclosure, griefing, or contention DoS.\n\n## Known system addresses (sanity references)\n\n`0x1` std · `0x2` Sui framework · `0x6` `Clock` · `0x8` `Random` · `0x403` coin `DenyList`.\n",{"data":40,"body":41},{"name":4,"description":6},{"type":42,"children":43},"root",[44,53,108,116,168,213,220,443,449,482,488],{"type":45,"tag":46,"props":47,"children":49},"element","h1",{"id":48},"move-security-review-on-sui",[50],{"type":51,"value":52},"text","Move Security Review (on Sui)",{"type":45,"tag":54,"props":55,"children":56},"blockquote",{},[57],{"type":45,"tag":58,"props":59,"children":60},"p",{},[61,67,69,75,77,82,84,90,92,98,100,106],{"type":45,"tag":62,"props":63,"children":64},"strong",{},[65],{"type":51,"value":66},"Self-bootstrap (any AI agent):",{"type":51,"value":68}," this skill is bundled inside the ",{"type":45,"tag":70,"props":71,"children":73},"code",{"className":72},[],[74],{"type":51,"value":8},{"type":51,"value":76}," binary. ",{"type":45,"tag":62,"props":78,"children":79},{},[80],{"type":51,"value":81},"For\ncomprehensive audits, read every reference file in this bundle",{"type":51,"value":83}," — default to\n",{"type":45,"tag":70,"props":85,"children":87},{"className":86},[],[88],{"type":51,"value":89},"sui prompt skill sui-move-security-review --all",{"type":51,"value":91}," for a one-shot load of all of them.\nIncremental loading is possible but should be the last resort. Even then, do not skip any files or rules to avoid creating blind spots. The detection heuristics, severity ratings, and exploit\nsketches live in those per-category files.\nThis skill belongs to one or more categories — run ",{"type":45,"tag":70,"props":93,"children":95},{"className":94},[],[96],{"type":51,"value":97},"sui prompt categories",{"type":51,"value":99}," to see them\nand ",{"type":45,"tag":70,"props":101,"children":103},{"className":102},[],[104],{"type":51,"value":105},"sui prompt category \u003Cname>",{"type":51,"value":107}," to read the category's workflow. No filesystem install\nis required — the binary is self-contained.",{"type":45,"tag":54,"props":109,"children":110},{},[111],{"type":45,"tag":58,"props":112,"children":113},{},[114],{"type":51,"value":115},"Offensive counterpart to the constructive Move skills — each rule = violated invariant\nwith detection heuristic, severity, and exploit sketch.",{"type":45,"tag":54,"props":117,"children":118},{},[119],{"type":45,"tag":58,"props":120,"children":121},{},[122,127,129,135,137,146,148,157,159,166],{"type":45,"tag":62,"props":123,"children":124},{},[125],{"type":51,"value":126},"Sources.",{"type":51,"value":128}," Per-rule citation ",{"type":45,"tag":70,"props":130,"children":132},{"className":131},[],[133],{"type":51,"value":134},"MystenLabs\u002Fskills → \u003Cfile>",{"type":51,"value":136},". ",{"type":45,"tag":62,"props":138,"children":139},{},[140],{"type":45,"tag":141,"props":142,"children":143},"span",{},[144],{"type":51,"value":145},"+domain",{"type":51,"value":147}," = established\nauditing practice not in upstream skills (high-yield, easy to miss — e.g. SM-A3, SM-B4).\nVerify on-chain facts against ",{"type":45,"tag":149,"props":150,"children":154},"a",{"href":151,"rel":152},"https:\u002F\u002Fdocs.sui.io",[153],"nofollow",[155],{"type":51,"value":156},"docs.sui.io",{"type":51,"value":158},",\n",{"type":45,"tag":149,"props":160,"children":163},{"href":161,"rel":162},"https:\u002F\u002Fmove-book.com",[153],[164],{"type":51,"value":165},"move-book.com",{"type":51,"value":167},", or framework source.",{"type":45,"tag":54,"props":169,"children":170},{},[171],{"type":45,"tag":58,"props":172,"children":173},{},[174,179,181,187,189,195,197,203,205,211],{"type":45,"tag":62,"props":175,"children":176},{},[177],{"type":51,"value":178},"Representation.",{"type":51,"value":180}," The catalog is stated in Move semantics. Use ",{"type":45,"tag":70,"props":182,"children":184},{"className":183},[],[185],{"type":51,"value":186},".move",{"type":51,"value":188}," files when\nthe target is a source repository. Use disassembly (",{"type":45,"tag":70,"props":190,"children":192},{"className":191},[],[193],{"type":51,"value":194},".asm",{"type":51,"value":196},") when the target is a\ndeployed on-chain package: fetch bytecode with ",{"type":45,"tag":70,"props":198,"children":200},{"className":199},[],[201],{"type":51,"value":202},"sui-and-move-tools",{"type":51,"value":204},", disassemble it,\nthen walk rules with ",{"type":45,"tag":70,"props":206,"children":208},{"className":207},[],[209],{"type":51,"value":210},"auditing-bytecode.md",{"type":51,"value":212}," as the per-rule opcode-signal bridge.",{"type":45,"tag":214,"props":215,"children":217},"h2",{"id":216},"how-to-audit-with-this-skill",[218],{"type":51,"value":219},"How to audit with this skill",{"type":45,"tag":221,"props":222,"children":223},"ol",{},[224,259,385,425],{"type":45,"tag":225,"props":226,"children":227},"li",{},[228,233,235,241,243,249,251,257],{"type":45,"tag":62,"props":229,"children":230},{},[231],{"type":51,"value":232},"Map the attack surface first.",{"type":51,"value":234}," List every ",{"type":45,"tag":70,"props":236,"children":238},{"className":237},[],[239],{"type":51,"value":240},"public",{"type":51,"value":242}," and ",{"type":45,"tag":70,"props":244,"children":246},{"className":245},[],[247],{"type":51,"value":248},"entry",{"type":51,"value":250}," function (these are the only\nexternally reachable entrypoints), every ",{"type":45,"tag":70,"props":252,"children":254},{"className":253},[],[255],{"type":51,"value":256},"*Cap",{"type":51,"value":258},"\u002Fwitness\u002FOTW type, every shared object, and\nevery struct's ability set. PTB callers control argument order and supply arbitrary inputs —\ntreat all entrypoints as adversarial.",{"type":45,"tag":225,"props":260,"children":261},{},[262,267,269,275,277],{"type":45,"tag":62,"props":263,"children":264},{},[265],{"type":51,"value":266},"Walk the catalog by category",{"type":51,"value":268}," (A–M). For each rule, run the ",{"type":45,"tag":70,"props":270,"children":272},{"className":271},[],[273],{"type":51,"value":274},"Detect",{"type":51,"value":276}," heuristic\nagainst the code representation.\n",{"type":45,"tag":278,"props":279,"children":280},"ul",{},[281,299],{"type":45,"tag":225,"props":282,"children":283},{},[284,297],{"type":45,"tag":62,"props":285,"children":286},{},[287,289,295],{"type":51,"value":288},"A grep hit is a ",{"type":45,"tag":290,"props":291,"children":292},"em",{},[293],{"type":51,"value":294},"candidate",{"type":51,"value":296},", not a finding.",{"type":51,"value":298}," Confirm the invariant is actually\nbroken before reporting.",{"type":45,"tag":225,"props":300,"children":301},{},[302,307,309,314,316,321,323,329,331,336,338,343,345,351,353,359,361,367,369,375,377,383],{"type":45,"tag":62,"props":303,"children":304},{},[305],{"type":51,"value":306},"A grep miss is NOT proof of absence — walk the candidate set explicitly.",{"type":51,"value":308}," Many\nrules detect the ",{"type":45,"tag":290,"props":310,"children":311},{},[312],{"type":51,"value":313},"absence",{"type":51,"value":315}," of a guard, check, or invariant — either purely (SM-A2,\nA3, A6, B4, D1, E4, G2) or as confirmation on top of a candidate-presence check\n(SM-C1, C3, C4, F2, G1, M1). For these the bug shape is \"X is missing where it\nshould be\"; an empty grep often means ",{"type":45,"tag":290,"props":317,"children":318},{},[319],{"type":51,"value":320},"\"X is missing everywhere\"",{"type":51,"value":322},". Identify the\nrule's candidate set (privileged call sites for SM-A6; ",{"type":45,"tag":70,"props":324,"children":326},{"className":325},[],[327],{"type":51,"value":328},"&mut SharedT",{"type":51,"value":330},"-mutating\n",{"type":45,"tag":70,"props":332,"children":334},{"className":333},[],[335],{"type":51,"value":240},{"type":51,"value":337},"\u002F",{"type":45,"tag":70,"props":339,"children":341},{"className":340},[],[342],{"type":51,"value":248},{"type":51,"value":344}," fns for SM-A2; cap-gated fns for SM-A3; ",{"type":45,"tag":70,"props":346,"children":348},{"className":347},[],[349],{"type":51,"value":350},"dynamic_field::borrow*",{"type":51,"value":352}," \u002F\n",{"type":45,"tag":70,"props":354,"children":356},{"className":355},[],[357],{"type":51,"value":358},"bag::borrow*",{"type":51,"value":360}," \u002F ",{"type":45,"tag":70,"props":362,"children":364},{"className":363},[],[365],{"type":51,"value":366},"table::borrow*",{"type":51,"value":368}," sites for SM-E4; ",{"type":45,"tag":70,"props":370,"children":372},{"className":371},[],[373],{"type":51,"value":374},"object::delete",{"type":51,"value":376}," sites for SM-C1;\netc.) and for each candidate check whether the required guard is present — reason\nabout dataflow, not the textual presence of ",{"type":45,"tag":70,"props":378,"children":380},{"className":379},[],[381],{"type":51,"value":382},"assert!",{"type":51,"value":384}," somewhere in the file.",{"type":45,"tag":225,"props":386,"children":387},{},[388,393,395,401,403,409,411,416,418,423],{"type":45,"tag":62,"props":389,"children":390},{},[391],{"type":51,"value":392},"Report findings keyed to the rule ID",{"type":51,"value":394}," (e.g. ",{"type":45,"tag":70,"props":396,"children":398},{"className":397},[],[399],{"type":51,"value":400},"SM-A3",{"type":51,"value":402},") with: severity, the offending\nlocation (",{"type":45,"tag":70,"props":404,"children":406},{"className":405},[],[407],{"type":51,"value":408},"file:line",{"type":51,"value":410},"), why the invariant is violated, and the concrete exploit. Distinguish\n",{"type":45,"tag":290,"props":412,"children":413},{},[414],{"type":51,"value":415},"exploitable",{"type":51,"value":417}," from ",{"type":45,"tag":290,"props":419,"children":420},{},[421],{"type":51,"value":422},"defense-in-depth",{"type":51,"value":424},".",{"type":45,"tag":225,"props":426,"children":427},{},[428,433,435,441],{"type":45,"tag":62,"props":429,"children":430},{},[431],{"type":51,"value":432},"Re-derive, don't trust naming.",{"type":51,"value":434}," A struct named ",{"type":45,"tag":70,"props":436,"children":438},{"className":437},[],[439],{"type":51,"value":440},"AdminCap",{"type":51,"value":442}," may be safe; an unnamed struct\nmay be the real authority. Reason from abilities and from who can construct\u002Fobtain a value.",{"type":45,"tag":214,"props":444,"children":446},{"id":445},"severity-legend",[447],{"type":51,"value":448},"Severity legend",{"type":45,"tag":278,"props":450,"children":451},{},[452,462,472],{"type":45,"tag":225,"props":453,"children":454},{},[455,460],{"type":45,"tag":62,"props":456,"children":457},{},[458],{"type":51,"value":459},"Critical",{"type":51,"value":461}," — direct loss\u002Ftheft of funds or objects, unlimited mint, total authority seizure, or permanent asset lock.",{"type":45,"tag":225,"props":463,"children":464},{},[465,470],{"type":45,"tag":62,"props":466,"children":467},{},[468],{"type":51,"value":469},"High",{"type":51,"value":471}," — privilege escalation, invariant bypass, or DoS of core functionality under realistic conditions.",{"type":45,"tag":225,"props":473,"children":474},{},[475,480],{"type":45,"tag":62,"props":476,"children":477},{},[478],{"type":51,"value":479},"Medium",{"type":51,"value":481}," — conditional\u002Flimited-impact issues, information disclosure, griefing, or contention DoS.",{"type":45,"tag":214,"props":483,"children":485},{"id":484},"known-system-addresses-sanity-references",[486],{"type":51,"value":487},"Known system addresses (sanity references)",{"type":45,"tag":58,"props":489,"children":490},{},[491,497,499,505,507,513,515,521,523,529,530,536,537,543,545,551],{"type":45,"tag":70,"props":492,"children":494},{"className":493},[],[495],{"type":51,"value":496},"0x1",{"type":51,"value":498}," std · ",{"type":45,"tag":70,"props":500,"children":502},{"className":501},[],[503],{"type":51,"value":504},"0x2",{"type":51,"value":506}," Sui framework · ",{"type":45,"tag":70,"props":508,"children":510},{"className":509},[],[511],{"type":51,"value":512},"0x6",{"type":51,"value":514}," ",{"type":45,"tag":70,"props":516,"children":518},{"className":517},[],[519],{"type":51,"value":520},"Clock",{"type":51,"value":522}," · ",{"type":45,"tag":70,"props":524,"children":526},{"className":525},[],[527],{"type":51,"value":528},"0x8",{"type":51,"value":514},{"type":45,"tag":70,"props":531,"children":533},{"className":532},[],[534],{"type":51,"value":535},"Random",{"type":51,"value":522},{"type":45,"tag":70,"props":538,"children":540},{"className":539},[],[541],{"type":51,"value":542},"0x403",{"type":51,"value":544}," coin ",{"type":45,"tag":70,"props":546,"children":548},{"className":547},[],[549],{"type":51,"value":550},"DenyList",{"type":51,"value":424},{"items":553,"total":715},[554,568,579,588,595,613,629,642,663,675,686,702],{"slug":555,"name":555,"fn":556,"description":557,"org":558,"tags":559,"stars":25,"repoUrl":26,"updatedAt":567},"move-bytecode-comprehension","analyze and disassemble Move bytecode","Use when reading or reasoning about compiled Move bytecode or `sui move disassemble` output. Mental model for the binary format, what survives compilation (and what's lost), and how to read disassembly soundly. Trigger on \"what does this package do?\", \"read this .mv module\", \"interpret this disassembly\", or whenever an analysis needs to interpret bytecode faithfully.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[560,563,566],{"name":561,"slug":562,"type":16},"Code Analysis","code-analysis",{"name":564,"slug":565,"type":16},"Engineering","engineering",{"name":18,"slug":8,"type":16},"2026-07-16T05:59:32.904886",{"slug":569,"name":569,"fn":570,"description":571,"org":572,"tags":573,"stars":25,"repoUrl":26,"updatedAt":578},"official-sui-skills","access official Sui development resources","Pointer to the official Mysten Labs skills for building on Sui — language fundamentals, object model, PTBs, SDKs, publishing, upgrades, frontend integration, accessing on-chain data. Maintained upstream at github.com\u002FMystenLabs\u002Fskills; pinned to the same ref the audit catalog derives from (see maintenance\u002FUPSTREAMS.md). Trigger on \"build a contract\", \"publish a package\", \"upgrade a module or package\", \"use the TypeScript SDK\", \"write a PTB\", \"set up a Sui client\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[574,577],{"name":575,"slug":576,"type":16},"Documentation","documentation",{"name":18,"slug":8,"type":16},"2026-07-16T06:00:59.641382",{"slug":202,"name":202,"fn":580,"description":581,"org":582,"tags":583,"stars":25,"repoUrl":26,"updatedAt":587},"disassemble Sui Move bytecode","Use to get bytecode for a deployed Sui package and produce a disassembled working view. One GraphQL call fetches every module's raw bytecode bytes; `sui move disassemble` (already on the system, running `sui prompt`) produces `.asm` files for analysis. Trigger on \"fetch this package's bytecode\", \"get me the .mv for package X\", \"disassemble this package\", or \"I need to read a deployed Sui package\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[584,585,586],{"name":561,"slug":562,"type":16},{"name":564,"slug":565,"type":16},{"name":18,"slug":8,"type":16},"2026-07-16T06:02:25.3633",{"slug":4,"name":4,"fn":5,"description":6,"org":589,"tags":590,"stars":25,"repoUrl":26,"updatedAt":27},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[591,592,593,594],{"name":20,"slug":21,"type":16},{"name":14,"slug":15,"type":16},{"name":23,"slug":24,"type":16},{"name":18,"slug":8,"type":16},{"slug":596,"name":596,"fn":597,"description":598,"org":599,"tags":600,"stars":610,"repoUrl":611,"updatedAt":612},"memwal","integrate Walrus Memory SDK","Walrus Memory SDK — portable agent memory that works across apps, sessions, and workflows.\n\nUse when users say:\n- \"add memory to my app\"\n- \"portable agent memory\"\n- \"integrate Walrus Memory\"\n- \"AI agent memory\"\n- \"memory across agents\"\n- \"Walrus memory storage\"\n- \"setup Walrus Memory\"\n- \"recall memories\"\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[601,604,607],{"name":602,"slug":603,"type":16},"Agents","agents",{"name":605,"slug":606,"type":16},"Memory","memory",{"name":608,"slug":609,"type":16},"SDK","sdk",57,"https:\u002F\u002Fgithub.com\u002FMystenLabs\u002FMemWal","2026-07-16T06:02:39.838395",{"slug":614,"name":614,"fn":615,"description":616,"org":617,"tags":618,"stars":626,"repoUrl":627,"updatedAt":628},"accessing-data","read data from the Sui network","How to read data from the Sui network. Use when choosing or implementing a data access strategy — queries for on-chain state, indexing pipelines, historical lookups, event subscriptions, cross-chain reads, or off-chain blob storage. Covers the two live Sui APIs (gRPC and GraphQL RPC), the Archival Store, the General-Purpose Indexer, the `sui-indexer-alt` custom indexing framework, and Walrus for off-chain blobs.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[619,622,623],{"name":620,"slug":621,"type":16},"Data Analysis","data-analysis",{"name":18,"slug":8,"type":16},{"name":624,"slug":625,"type":16},"Web3","web3",9,"https:\u002F\u002Fgithub.com\u002FMystenLabs\u002Fskills","2026-08-01T05:44:32.775598",{"slug":630,"name":630,"fn":631,"description":632,"org":633,"tags":634,"stars":626,"repoUrl":627,"updatedAt":641},"composable-move-functions","design composable Sui Move functions","Use when writing Move functions on Sui, especially public APIs. Applies to function visibility (public vs entry), parameter ordering, and return patterns. Use whenever designing function signatures or deciding whether functions should transfer objects or return them.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[635,638,639,640],{"name":636,"slug":637,"type":16},"API Development","api-development",{"name":23,"slug":24,"type":16},{"name":18,"slug":8,"type":16},{"name":624,"slug":625,"type":16},"2026-07-16T06:02:49.198495",{"slug":643,"name":643,"fn":644,"description":645,"org":646,"tags":647,"stars":626,"repoUrl":627,"updatedAt":662},"frontend-apps","build Sui dApps with dapp-kit","Sui frontend \u002F dApp development with @mysten\u002Fdapp-kit-react (React) and @mysten\u002Fdapp-kit-core (Vue, vanilla JS, Svelte, Web Components, other frameworks). Use when building browser apps that connect Sui wallets, query on-chain state, or submit transactions. Covers wallet connection, network switching, transaction execution, query patterns with TanStack React Query, and the specific pitfalls of browser + wallet + async-indexer environments. Pair with the `sui-sdks` skill for @mysten\u002Fsui Transaction construction patterns and the `ptbs` skill for PTB semantics.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[648,651,654,655,658,661],{"name":649,"slug":650,"type":16},"Frontend","frontend",{"name":652,"slug":653,"type":16},"React","react",{"name":18,"slug":8,"type":16},{"name":656,"slug":657,"type":16},"Svelte","svelte",{"name":659,"slug":660,"type":16},"Vue","vue",{"name":624,"slug":625,"type":16},"2026-08-01T05:44:28.958473",{"slug":664,"name":664,"fn":665,"description":666,"org":667,"tags":668,"stars":626,"repoUrl":627,"updatedAt":674},"generate-sui-agent-config","generate configuration files for Sui projects","Generate a CLAUDE.md or AGENT.md configuration file for Sui projects. Use when setting up a new Sui project, when user mentions \"CLAUDE.md\", \"AGENT.md\", \"agent config\", or when working on a Sui project that does not already have a CLAUDE.md or AGENT.md in the project root.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[669,672,673],{"name":670,"slug":671,"type":16},"Configuration","configuration",{"name":575,"slug":576,"type":16},{"name":18,"slug":8,"type":16},"2026-07-16T06:00:59.981056",{"slug":676,"name":676,"fn":677,"description":678,"org":679,"tags":680,"stars":626,"repoUrl":627,"updatedAt":685},"modern-move-syntax","write Move 2024 edition code for Sui","Use when writing Move code on Sui to ensure 2024 edition syntax is used. Applies to method calls, string literals, vector operations, option handling, loops, and struct unpacking. Use whenever writing Move code to avoid legacy function-call syntax patterns.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[681,682,683,684],{"name":564,"slug":565,"type":16},{"name":23,"slug":24,"type":16},{"name":18,"slug":8,"type":16},{"name":624,"slug":625,"type":16},"2026-07-16T06:02:43.277596",{"slug":687,"name":687,"fn":688,"description":689,"org":690,"tags":691,"stars":626,"repoUrl":627,"updatedAt":701},"move-unit-testing","write unit tests for Sui Move contracts","Use when writing unit tests for Move smart contracts on Sui. Applies to test function naming, assertions, test attributes, context usage, and cleanup patterns. Use whenever user asks to write tests, add tests, or test a Move module.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[692,695,696,697,700],{"name":693,"slug":694,"type":16},"QA","qa",{"name":23,"slug":24,"type":16},{"name":18,"slug":8,"type":16},{"name":698,"slug":699,"type":16},"Testing","testing",{"name":624,"slug":625,"type":16},"2026-08-01T05:44:30.788585",{"slug":703,"name":703,"fn":704,"description":705,"org":706,"tags":707,"stars":626,"repoUrl":627,"updatedAt":714},"naming-conventions","apply Sui Move naming conventions","Use when writing or reviewing Move smart contracts on Sui. Applies to naming structs, error constants, regular constants, events, getter functions, capability types, hot potato types, and dynamic field keys. Use whenever creating new types, functions, or constants in Move code.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[708,711,712,713],{"name":709,"slug":710,"type":16},"Best Practices","best-practices",{"name":23,"slug":24,"type":16},{"name":18,"slug":8,"type":16},{"name":624,"slug":625,"type":16},"2026-07-16T06:02:48.830052",37,{"items":717,"total":742},[718,724,729,735],{"slug":555,"name":555,"fn":556,"description":557,"org":719,"tags":720,"stars":25,"repoUrl":26,"updatedAt":567},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[721,722,723],{"name":561,"slug":562,"type":16},{"name":564,"slug":565,"type":16},{"name":18,"slug":8,"type":16},{"slug":569,"name":569,"fn":570,"description":571,"org":725,"tags":726,"stars":25,"repoUrl":26,"updatedAt":578},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[727,728],{"name":575,"slug":576,"type":16},{"name":18,"slug":8,"type":16},{"slug":202,"name":202,"fn":580,"description":581,"org":730,"tags":731,"stars":25,"repoUrl":26,"updatedAt":587},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[732,733,734],{"name":561,"slug":562,"type":16},{"name":564,"slug":565,"type":16},{"name":18,"slug":8,"type":16},{"slug":4,"name":4,"fn":5,"description":6,"org":736,"tags":737,"stars":25,"repoUrl":26,"updatedAt":27},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[738,739,740,741],{"name":20,"slug":21,"type":16},{"name":14,"slug":15,"type":16},{"name":23,"slug":24,"type":16},{"name":18,"slug":8,"type":16},4]