Sui Coverage

Analyze Sui Move test coverage, identify untested code, write missing tests, and perform security audits. Includes Python tools for parsing coverage output and generating reports.

This skill is internally consistent with a Sui Move coverage helper: it expects you to run 'sui move test --coverage' and then runs local Python parsers to analyze colored coverage output or LCOV files. Before installing or invoking the skill, consider: - Trust the repository: the scripts will execute the 'sui' CLI and will read your package sources and coverage outputs. Running tests will execute code in the target Move package, so only run against trusted code or in a sandbox. - Review the bundled scripts (they are small, local Python files) if you want certainty; they do not perform network calls, require secrets, or auto-write tests. - The description mentions 'security audits' but the supplied code only generates coverage-based suggestions and does light pattern inspection; it does not replace a dedicated security audit tool. - Because the skill invokes the Sui CLI (os.execvp/PTY usage), ensure your environment has the intended version of 'sui' and that you understand the effects of running package tests. If you need automated test generation or deep security analysis, ask for clarification from the author or use dedicated tooling. Otherwise this skill appears coherent and low risk for use in a development sandbox.

Type: OpenClaw Skill Name: sui-coverage Version: 1.1.1 The skill is designed to analyze Sui Move test coverage and assist in writing tests, including a security-focused approach. All files, including the `SKILL.md` instructions and Python scripts, align with this stated purpose. The `analyze_source.py` script uses `pty.openpty` and `os.execvp` to run the `sui` CLI, which is a powerful capability, but its usage is strictly limited to executing the `sui move coverage source` command, a core function of the skill. There is no evidence of malicious command construction, data exfiltration, persistence mechanisms, or prompt injection attempts against the agent to perform actions outside the skill's scope or against user intent. The security analysis instructions in `SKILL.md` guide the agent's analytical process, not malicious actions.