MystenLabs

Sui SDK landscape — which SDK to pick (TypeScript, Rust, or community-maintained Python/Go/Dart/Kotlin/Swift), how they map to each other, and how to install and wire each one up. Use when a user is starting a new Sui project in any language, migrating…

Sui TypeScript SDK for backend services and autonomous agents. Use when building a backend, agent, or service that interacts with Sui programmatically without CLI — keypair creation, faucet funding, client setup, transaction building and signing, package…

Sui Kiosk and NFT trading primitives. Use when writing, reviewing, or debugging Move code that uses Kiosk for commerce, NFT trading, asset listing, TransferPolicy enforcement, or building Kiosk Apps and extensions. Also use when the user asks about asset…

Move smart contract security on Sui. Use when reviewing Move code for security vulnerabilities, designing access control patterns, handling capabilities safely, securing randomness usage, validating invariants, planning upgrade governance, managing keys, or…

Onchain randomness on Sui. Use when generating random values in Move smart contracts, working with the Random object (0x8) or RandomGenerator, securing randomness-consuming functions against composition attacks, PTB attacks, or state leakage, implementing…

Sui Bridge — the native bridge for the Sui network. Use when explaining how Sui Bridge works, looking up supported assets, querying package IDs or contract addresses, understanding the global limiter, transfer parameters, finality requirements, or governance…

Migrating from Ethereum/EVM/Solidity to Sui Move. Use when the user is an Ethereum developer learning Sui, comparing Solidity patterns to Move equivalents, asking about differences between EVM and MoveVM, mapping Ethereum token standards to Sui standards, or…

High-level overview of what Sui is, how it works, and what the Sui Stack provides. Use when explaining Sui to someone new, comparing Sui to other blockchains (Ethereum, Solana, Bitcoin), discussing the object-centric data model at a conceptual level, choosing…

Walrus Memory (MemWal) — persistent, portable, encrypted memory for AI agents. Use when the user needs to give an AI agent persistent memory across sessions and apps, integrate the @mysten-incubation/memwal TypeScript SDK or Python memwal SDK, set up the…

Running a local Walrus Sites portal to view testnet sites. Use when the user needs to set up the portal server, fix portal 404 errors, resolve port conflicts, understand the original_package_id configuration, or learn why wal.app doesn't serve testnet sites.…

Publishing, updating, and managing decentralized websites with the Walrus Sites site-builder CLI. Use when the user needs to deploy a static frontend to Walrus Sites, update an existing deployment, configure ws-resources.json for SPA routing or custom…

Deploying, updating, and serving decentralized static websites on Walrus Sites. Use when the user needs to deploy a frontend to Walrus Sites, run a local portal for testnet or mainnet, use the site-builder CLI, configure ws-resources.json (routing, headers,…

Managing Walrus blob lifecycles: epochs, lifetimes, extending blobs, deleting blobs, burning blob objects, sharing blobs, setting blob attributes, and handling large uploads. Use when the user needs to extend a blob's lifetime, delete or burn blobs, create…

Walrus CLI client for storing, reading, and managing blobs from the command line. Use when the user needs to run walrus store, walrus read, walrus blob-status, walrus extend, walrus delete, walrus share, or any other walrus CLI command. Also use for CLI…

Referencing and wrapping Walrus blobs in Sui Move smart contracts. Use when the user needs to wrap a Walrus Blob object in a custom Move struct, add Walrus as a Move dependency, build a contract that depends on the Walrus package, or integrate on-chain logic…

High-level overview of Walrus: what it is, how it works, and which tool to use. Use when the user is new to Walrus, asks "what is Walrus", "how does Walrus work", "what is a blob", or needs to choose between CLI, HTTP API, TypeScript SDK, and Move…

Use when a developer wants to pick or configure the Seal session-key strategy for their Sui Stack Messaging integration — the three tiers (signer / callback / manual), TTL and refresh-buffer tuning, lifecycle management, key rotation under load, MVR-name…

Use when a developer wants to add Sui Stack Messaging to their own dapp / project — installing the @mysten/sui-stack-messaging npm package, picking the createSuiStackMessagingClient factory vs manual $extend chain, wiring up session keys, and the minimum…

Use when the user wants a FULLY-LOCAL stack (no testnet dependency) for Sui Stack Messaging — including a LOCAL Seal key server so message decryption works on localnet. Uses @mysten-incubation/devstack to compose a local Sui node + local-keygen Seal +…

Use when the user wants to run the full local stack end-to-end — relayer + walrus-discovery-indexer + chat-app — together for development or demo. Trigger phrases - "run everything locally", "full local stack", "end-to-end setup", "run the chat app with…

Use when a developer wants to bring their own relayer (or sponsor / gas model) without forking the reference Rust relayer — they implement the RelayerTransport TypeScript interface in their app, hand it to the SDK via `relayer.transport`, and the SDK uses it…

Use when a developer wants to implement a custom attachments `StorageAdapter` for sui-stack-messaging — most commonly talking to Walrus directly via the `@mysten/walrus` SDK (instead of going through a publisher / aggregator), or plugging in a non-Walrus…

Use when a developer's messages aren't decrypting end-to-end — wrong content, AES-GCM authentication failures, missing DEK, Seal session-key errors, sender-verification failing, or attachments not decrypting. Walks through the envelope-encryption flow stage…

Use when starting a new project on Sui Stack Messaging, asking how to develop on or extend the messaging stack, or needing an overview of canonical packages vs reference implementations meant to be forked. Trigger phrases - "develop on sui-stack-messaging",…

Prepare, validate, and send or update a pull request with full due diligence

Use when reading or reasoning about compiled Move bytecode or `sui move disassemble` output. Mental model for the binary format, what survives compilation (and what's lost), and how to read disassembly soundly. Trigger on "what does this package do?", "read…

Pointer to the official Mysten Labs skills for building on Sui — language fundamentals, object model, PTBs, SDKs, publishing, upgrades, frontend integration, accessing on-chain data. Maintained upstream at github.com/MystenLabs/skills; pinned to the same ref…

Use to get bytecode for a deployed Sui package and produce a disassembled working view. One GraphQL call fetches every module's raw bytecode bytes; `sui move disassemble` (already on the system, running `sui prompt`) produces `.asm` files for analysis.…

Use when auditing, reviewing, or hunting for vulnerabilities in Move code on Sui. Applies equally to source code (.move files) and to disassembly of compiled bytecode (on-chain packages). A checklist of invariants whose VIOLATION causes exploitable bugs:…

Debug deterministic Sui simtest failures with structured experiments, logging-only changes, and NOTEBOOK.md observations.

Cherry-pick a commit from main to a Sui release branch, create the release PR, and report the PR URL.

Run Sui dual execution replay between base and tip commits, recover failed steps, build, and commit replay instrumentation.

Fix pnpm audit vulnerabilities. Upgrades packages, adds overrides, handles minimumReleaseAge restrictions, and cleans up stale overrides.

Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include…

Write and maintain SDK documentation in packages/docs/content/. Use when adding new doc pages, updating existing docs, or modifying the documentation structure. Ensures frontmatter, meta.json, and LLM index stay in sync.

Fix bugs or add features in the @mysten/sui client layer (gRPC, JSON-RPC, GraphQL). Ensures all three transport implementations stay in sync.

Deep, multi-lens security & correctness audit of the DeepBook Predict smart contracts (the predict + propbook + account Move source). Use when asked to audit Predict, hunt bugs/invariant-violations/exploits in Predict, review Predict contract changes before…

Default shape for every pull request in this repository — split a change into a two-layer stack, code first (Move/Rust/TS/Python source, tests, manifests, scripts), then docs and setup (Markdown, package docs, predeploy registers, .claude/, CLAUDE.md,…

Giving an autonomous agent a wallet on Sui that it cannot drain. Use when writing, reviewing, or debugging code where an AI agent holds funds, signs transactions, or acts on a user's behalf on Sui, and when the task involves spend limits, human approval…

Replace with a trigger-style description of when this skill should activate. Be specific — this is what the agent uses to decide whether to load the skill. Example: "Sui TypeScript SDK integration. Use when writing, reviewing, or debugging TypeScript code…

This skill should be used when the user asks to "inspect walrus network", "check walrus network status", "query walrus storage nodes", "walrus committee info", "walrus node health", "inspect-walrus-network", or discusses Walrus production network monitoring…

Walrus Memory SDK — portable agent memory that works across apps, sessions, and workflows. Use when users say: - "add memory to my app" - "portable agent memory" - "integrate Walrus Memory" - "AI agent memory" - "memory across agents" - "Walrus memory…

Answer questions about the Walrus Training Program course content. Uses multi-agent search and AskUserQuestion for question refinement. Provides citations for all claims. Only uses course content as source. Use when: user asks about Walrus concepts, CLI, SDK,…

Full-stack Sui blockchain development — Move smart contracts, TypeScript SDK, and frontend dApp Kit. Routes to the appropriate sub-skill based on what the user is building.

Steps to issue a new admin key for an app