LaunchKit · 2026
Back to Skills

suisec

Sui Secure - Pre-simulate transactions via sui client call --dry-run and sui client ptb --dry-run, compare results.

2
829 downloads
by @k66inthesky

Setup & Installation

openclaw skills install @k66inthesky/suisec

Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:

npx clawhub install suisec

Version History

v1.0.1Feb 11, 2026 - Version note by skill developer:

- No code or documentation changes in this release. - Version bump only; content and behavior remain the same as previous version.

What This Skill Does

Sui Secure intercepts Sui blockchain transactions before execution by running a dry-run simulation and comparing results against your declared intent. If the simulated outcome diverges from expectations, the transaction is blocked. Supports both automated auditing via main.py and manual comparison for sui client call commands.

Unlike manually inspecting contract source code, suisec runs the actual transaction path in simulation and surfaces concrete balance and object changes against your stated intent.

When to use it

  • Catching hidden SUI drain to attacker addresses before signing
  • Verifying NFT mint cost matches quoted price
  • Auditing swap transactions for unexpected asset flows
  • Blocking object ownership hijack in DeFi interactions
  • Pre-checking gas consumption on unfamiliar smart contracts

Example Workflow

Here's how your AI assistant might use this skill in practice.

INPUT

User asks: run this PTB to swap 100 USDC for SUI, should cost about 0.01 SUI

AGENT
  1. 1Collect user intent: swap 100 USDC for SUI, gas under 0.01 SUI
  2. 2Run python3 main.py 0.01 'sui client ptb --move-call 0xPKG::module::swap ...'
  3. 3Parse balance changes and object changes from dry-run JSON output
  4. 4Compare each change against declared intent, flag any unexpected recipients or mutations
  5. 5Report SAFE TO SIGN or BLOCKING MALICIOUS TRANSACTION based on exit code
OUTPUT

Audit passed: balance changes match intent, no unknown recipients detected. Transaction executed, digest: 0xABC123...

Requirements

Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.

Sui CLI installed and configured with an active addressmain.py auditor script present in the working directory