deploy-to-testnet — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited deploy-to-testnet (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
# Suiperpower telemetry. Routes through the CLI so projects.json + Convex stay in sync.
# Silent on failure so the skill never blocks. Opt out: SUIPERPOWER_TELEMETRY=off.
#
# AGENT NOTE: when this skill finishes, run the matching completion command:
# suiperpower track deploy-to-testnet ship completed
# Or use "failed" / "aborted" if it ended that way.
command -v suiperpower >/dev/null 2>&1 && suiperpower track deploy-to-testnet ship started >/dev/null 2>&1 &
trueIf TEL_PROMPTED is no, before doing real work, ask the user:
Help suiperpower get better. We track which skills get used and how long they take. No code, no file paths, no PII. Change anytime in ~/.suiperpower/config.json.>
A) Sure, anonymous B) No thanks
Write the answer to ~/.suiperpower/config.json telemetryTier field and create ~/.suiperpower/.telemetry-prompted. Then continue.
Runs the testnet deploy flow end to end: validates prerequisites, runs sui client publish, captures the package id and UpgradeCap from the publish output, writes deploy-context.md with the real artifacts, and points the user at the next step.
The flow follows skills/data/guides/deploy-runbook.md for the publish steps and skills/data/guides/package-id-capture.md for the capture rules. Capability handling is non-trivial; the skill never prints capability ids in shared logs and never hardcodes them into client code.
deploy-to-mainnet.sui move test and the local validator directly; no deploy-context is written for localnet.If you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
.suiperpower/build-context.md for the Move package path and module names.testnet env. If not, the skill walks the env switch per skills/data/guides/rpc-wallet-guide.md.A .suiperpower/deploy-context.md entry following the canonical headers from skills/data/specs/phase-handoff.md:
## Deploy, <timestamp>
### Network
- env: testnet
- rpc: <rpc url>
- gas address: <0x...>
- balance before: <SUI>
- balance after: <SUI>
### Package
- package id: <0x...>
- modules: <comma-separated module names>
- digest: <publish digest>
- upgrade cap object: <0x...>
- upgrade cap policy: <compatible | additive | dep-only | immutable>
### Notes
- <anything the user should know about this deploy>skills/data/guides/deploy-runbook.md. If not, ask the user to run cargo install --git https://github.com/MystenLabs/sui --branch testnet sui or use the official binary.testnet via sui client active-env. If not, switch.build-context.md to get the package path. Default to ./move/.sui move build --path <package path>. Surface any error.sui move test --path <package path>. If tests fail, do not proceed.skills/data/guides/deploy-runbook.md:sui client publish <package path> --gas-budget <budget> --json
skills/data/guides/package-id-capture.md to extract:package iddigestUpgradeCap object id## Deploy, <timestamp> block per the spec headers.## Deploy blocks intact (append-only).sui client object <package id> to confirm the package exists.sui client object <upgrade cap id> to confirm the cap landed in the active address.cli/data/sui-skills.json or their frontend.deploy-to-mainnet once the testnet deploy has been exercised by a frontend or PTB. Recommend submit-to-sui-overflow if this is the submission deploy.Before reporting done:
sui move build and sui move test both pass before publish?UpgradeCap object id captured and recorded?deploy-context.md appended (not overwritten)?sui client object checks run and surfaced?If any answer is no, the skill keeps working.
On-demand references (load when relevant to the user's question):
references/preflight-checklist.md: Step-by-step preflight items to verify before publish.references/troubleshooting.md: Common testnet publish failures and fixes.Canonical:
skills/data/guides/deploy-runbook.mdskills/data/guides/package-id-capture.mdskills/data/guides/rpc-wallet-guide.mdclaude "/suiper:deploy-to-testnet <your message>"codex "/deploy-to-testnet <your message>"grok, then /deploy-to-testnet <your message> in the session~/.cursor/rules/deploy-to-testnet.mdc and reference it.If you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.