Move Auditor Skills

March 23, 2026 · View on GitHub

AI-powered Sui Move security skills for auditing packages that live in an object-centric runtime, not an EVM account model.

Built on the v2 packaging and workflow model from pashov/skills, then adapted for Move and Sui-specific security work.

Supported AI Platforms:

Install, Run & Update Prompts

Install https://github.com/sanbir/move-auditor-skills/ and run move-auditor with all different agents possible on the codebase

run the move-auditor skill with all the different agents possible on *specified files*

update skill to latest version

What This Repo Focuses On

This repo is for Move security, with Sui as the primary target.

It is tuned for issues that matter in Move packages and do not map cleanly to Solidity habits:

capability leakage and witness misuse
shared-object race windows and PTB composition bugs
object ownership and transfer invariants
dynamic-field corruption or overwrite patterns
package upgrade and version-gating mistakes
kiosk, coin, treasury, and vault accounting flaws
stale oracle usage and cross-object economic assumptions

If you are looking for generic static analysis or style checks, use a different tool. This repo is for vulnerability detection and threat modeling on Move runtimes.

Skills

Skill	Description
move-auditor	Fast security feedback for Sui Move packages with attack-vector coverage for capabilities, shared objects, PTBs, upgrades, and object accounting.

Contributing · Security · License · Contact

We welcome improvements and fixes. See CONTRIBUTING.md for the PR process.

If you are securing Move systems and want to discuss improvements, open an issue or reach out via the maintainer profile on GitHub.