build-ai-agent — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited build-ai-agent (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
# Suiperpower telemetry. Routes through the CLI so projects.json + Convex stay in sync.
# Silent on failure so the skill never blocks. Opt out: SUIPERPOWER_TELEMETRY=off.
#
# AGENT NOTE: when this skill finishes, run the matching completion command:
# suiperpower track build-ai-agent build completed
# Or use "failed" / "aborted" if it ended that way.
command -v suiperpower >/dev/null 2>&1 && suiperpower track build-ai-agent build started >/dev/null 2>&1 &
trueIf TEL_PROMPTED is no, before doing real work, ask the user:
Help suiperpower get better. We track which skills get used and how long they take. No code, no file paths, no PII. Change anytime in ~/.suiperpower/config.json.>
A) Sure, anonymous B) No thanks
Write the answer to ~/.suiperpower/config.json telemetryTier field and create ~/.suiperpower/.telemetry-prompted. Then continue.
Guides the user through building an AI agent that autonomously transacts on Sui. Picks the right wallet pattern, compute layer, memory system, and coordination model for the agent's use case, then wires them together with PTBs as the agent's tool-use layer. Refuses to ship an agent that cannot execute a real transaction end to end.
find-next-sui-idea first.scaffold-project first.sui-zk-login.sponsored-transactions.seal-access-control.build-with-move.If you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
.suiperpower/build-context.md from scaffold-project. Read it if present.If unclear, interview the user for:
.suiperpower/build-context.md: ## build-ai-agent session, <timestamp>
- agent purpose: <one sentence>
- wallet pattern: <zkLogin+sponsored | keypair | hybrid>
- compute: <Nautilus | Atoma | local | none>
- memory: <MemWal | custom | none>
- coordination: <shared objects | events | none>
- packages added: <list>
- open issues: <list>| Use case | Wallet | Compute | Memory | Coordination |
|---|---|---|---|---|
| Trading bot (server-side) | Ed25519 keypair | Atoma or local LLM | MemWal | Events for signals |
| User-facing assistant | zkLogin + Enoki sponsored | Atoma API | MemWal | None |
| Data marketplace agent | zkLogin + sponsored | Nautilus TEE | Walrus blobs | Shared object registry |
| Multi-agent swarm | Keypair per agent | Atoma | MemWal per agent | Shared objects as bulletin boards |
| Privacy-preserving agent | zkLogin | Nautilus TEE + Seal | MemWal (encrypted) | Events, Seal-gated |
| Game NPC / autonomous entity | Keypair (server) | Local or Atoma | MemWal | Shared game state objects |
Confirm the architecture with the user before writing code. If the use case does not fit a row, compose from the columns.
.suiperpower/build-context.md if it exists.sui-zk-login and sponsored-transactions skills for detail.@mysten/sui/keypairs/ed25519. Store the private key in env or KMS, never in source. Fund with SUI for gas.NestedResult.Transaction from @mysten/sui/transactions. Compose multi-step atomic operations: check condition, swap, update state, emit event, all in one PTB.references/agent-architecture.md for PTB-as-tool-use patterns.@mysten-incubation/memwal and peer deps (@mysten/sui, @mysten/seal, @mysten/walrus, ai, zod).mw.remember() to store decisions, user preferences, and context.mw.recall() for semantic retrieval.references/agent-tooling.md for the API.references/agent-architecture.md for the Nautilus flow.sui::event::emit for agent-to-agent signals, poll via queryEvents (suix_subscribeEvent is deprecated).remember then recall returns the stored context..suiperpower/build-context.md..suiperpower/intent.md exists and the session was non-trivial (new module, new sponsor integration, or material changes to public functions), recommend verify-against-intent as the next step so drift is caught before shipping.intent.md exists and the session was non-trivial, surface that gap once: offer clarify-intent to backfill, do not force it.Before reporting done, the skill asks itself the following and refuses to declare success if any answer is no:
If any answer is no, the skill reports the gap and works through it before claiming the session is complete.
On-demand references (load when relevant to the user's question):
references/agent-architecture.md: Why Sui for agents, PTBs as tool use, wallet patterns, memory, compute, coordination.references/agent-tooling.md: MemWal API, Atoma API, agent frameworks (Sui Agent Kit, Caterpillar Kit, Talus), Enoki sponsored flow, npm packages.references/agent-pitfalls.md: Common mistakes when building AI agents on Sui.External docs (fetch at runtime for the latest API surface):
claude "/suiper:build-ai-agent <your message>"codex "/build-ai-agent <your message>"grok, then /build-ai-agent <your message> in the session~/.cursor/rules/build-ai-agent.mdcIf you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.