eve-frontier — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited eve-frontier (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
# Suiperpower telemetry. Routes through the CLI so projects.json + Convex stay in sync.
# Silent on failure so the skill never blocks. Opt out: SUIPERPOWER_TELEMETRY=off.
#
# AGENT NOTE: when this skill finishes, run the matching completion command:
# suiperpower track eve-frontier build completed
# Or use "failed" / "aborted" if it ended that way.
command -v suiperpower >/dev/null 2>&1 && suiperpower track eve-frontier build started >/dev/null 2>&1 &
trueIf TEL_PROMPTED is no, before doing real work, ask the user:
Help suiperpower get better. We track which skills get used and how long they take. No code, no file paths, no PII. Change anytime in ~/.suiperpower/config.json.>
A) Sure, anonymous B) No thanks
Write the answer to ~/.suiperpower/config.json telemetryTier field and create ~/.suiperpower/.telemetry-prompted. Then continue.
Guides the user through building a Smart Assembly extension for EVE Frontier on Sui. Picks the right assembly type (Turret, Gate, or StorageUnit), scaffolds from the official builder-scaffold repo, writes the Move extension logic using the typed witness pattern, tests locally with Docker, deploys to testnet, and registers the extension with the assembly. The user ends up with a working, deployable game mod.
find-next-sui-idea first.build-with-move.walrus-storage.deploy-to-testnet.sui-beginner or virtual-sui-incubator.If you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
.suiperpower/build-context.md from prior skills. Read it if present.If the user is unsure what to build, interview for:
authorize_extension..suiperpower/build-context.md: ## eve-frontier session, <timestamp>
- assembly type: <turret | gate | storage_unit>
- extension function: <get_target_priority_list | issue_jump_permit | deposit/withdraw wrapper>
- auth witness: <module::StructName>
- package id (testnet): <id or pending>
- extension registered: <yes | pending>
- uses: <walrus | seal | zklogin | none>
- open issues: <list>| Use case | Assembly type | Extension pattern |
|---|---|---|
| Custom targeting logic (friend/foe, priority, conditional) | Turret (world::turret) | Implement get_target_priority_list, return BCS-encoded priority list. Uses OnlineReceipt hot potato. |
| Access control for travel (allowlist, token-gate, reputation, paid entry) | Gate (world::gate) | Issue JumpPermit via gate::issue_jump_permit. Permit model, not bool return. |
| Vending machine, trading post, item exchange | StorageUnit (world::storage_unit) | Wrap deposit_item/withdraw_item with your Auth witness and business logic. No hook function. |
If the user's idea spans two types (e.g., a gate that also sells access passes via a storage unit), start with the primary type and extend. Each assembly is a separate module; they compose through shared state or cross-module calls.
.suiperpower/build-context.md if it exists.docker --version). Flag if missing: local testing requires it.git clone https://github.com/evefrontier/builder-scaffold.public struct MyAuth has drop {}).get_target_priority_list(turret, character, candidates, receipt) -> vector<u8>. Must consume the OnlineReceipt hot potato via turret::destroy_online_receipt<MyAuth>. Decode input with turret::unpack_candidate_list(), encode output with bcs::to_bytes().gate::issue_jump_permit<MyAuth>() or gate::issue_jump_permit_with_id<MyAuth>() after your access checks. No bool return.storage_unit::deposit_item<MyAuth>() / storage_unit::withdraw_item<MyAuth>() with your business logic.references/eve-assembly-types.md for the correct function signatures and return types.sui move build.sui client publish --gas-budget 100000000.authorize_extension<YourAuth>() on the assembly.OwnerCap<Turret>, OwnerCap<Gate>, or OwnerCap<StorageUnit>.extension field should contain your type name..suiperpower/build-context.md..suiperpower/intent.md exists and the session was non-trivial (new module, new sponsor integration, or material changes to public functions), recommend verify-against-intent as the next step so drift is caught before shipping.intent.md exists and the session was non-trivial, surface that gap once: offer clarify-intent to backfill, do not force it.Before reporting done, the skill asks itself the following and refuses to declare success if any answer is no:
sui move build?references/eve-assembly-types.md)?If any answer is no, the skill reports the gap and works through it before claiming the build is complete.
On-demand references (load when relevant to the user's question):
references/eve-quickstart.md: Setup, scaffold cloning, Docker environment, deploy flow.references/eve-assembly-types.md: Three assembly types with extension function signatures, typed witness pattern, and actual struct/type names.External docs (fetch at runtime for the latest API surface):
claude "/suiper:eve-frontier <your message>"codex "/eve-frontier <your message>"grok, then /eve-frontier <your message> in the session~/.cursor/rules/eve-frontier.mdc and reference it.If you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.