Skills move-code-quality
📦
move-code-quality
Content revision r2 Safe ⚡ Contains scripts⚙️ External commands🌐 Network access
Review Move Code Against Modern Quality Standards
Move projects can drift from modern syntax and package conventions. This skill reviews Move packages against the Move Book checklist and returns prioritized, actionable findings.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "move-code-quality" from https://skillstore.io/skills/davila7-move-code-quality.md and its manifest at https://skillstore.io/api/skills/davila7-move-code-quality/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "move-code-quality". Review the package manifest and main source module for Move 2024 compliance.
Expected outcome:
- Critical: Move.toml does not declare the Move 2024 edition. Add the edition before adopting checklist features.
- Important: The main module uses legacy module syntax. Convert it to the modern module label format.
- Passed: Named addresses use package-specific prefixes.
Using "move-code-quality". Check the test module for maintainability.
Expected outcome:
- Important: Expected-failure attributes are split across lines. Merge them for consistency.
- Recommended: A simple context is sufficient for this test. Remove unnecessary scenario setup.
- Passed: Assertions use comparison helpers that show both values on failure.
Security Audit
Safev9 • 7/23/2026 Open versioned report
All 102 static findings are false positives caused by Markdown formatting, Move macro names, ordinary review prose, and a documentation URL. SKILL.md contains guidance only and does not execute commands, construct dynamic functions, perform reconnaissance, or make network requests. No prompt injection or other semantic security issue was found.
1
Files scanned
416
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚡ Contains scripts (2)
⚙️ External commands (50)
SKILL.md:15 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:51 SKILL.md:55 SKILL.md:59 SKILL.md:60 SKILL.md:67 SKILL.md:68 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:76 SKILL.md:80 SKILL.md:81 SKILL.md:84 SKILL.md:85 SKILL.md:92 SKILL.md:93 SKILL.md:96 SKILL.md:97 SKILL.md:100 SKILL.md:101 SKILL.md:104 SKILL.md:105 SKILL.md:112 SKILL.md:113 SKILL.md:114 SKILL.md:118 SKILL.md:119 SKILL.md:131-151 SKILL.md:151-154 SKILL.md:154-155 SKILL.md:155-158 SKILL.md:158-159 SKILL.md:159-160 SKILL.md:160-167 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170-173 SKILL.md:173-174 SKILL.md:174-175 SKILL.md:175-178 SKILL.md:178-179 SKILL.md:179-182 SKILL.md:182-183 SKILL.md:183-186 SKILL.md:186-187
🌐 Network access (1)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/davila7-move-code-quality/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/davila7-move-code-quality?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/davila7-move-code-quality?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/davila7-move-code-quality/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/davila7-move-code-quality.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
davila7. (2026). move-code-quality security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/davila7-move-code-quality/audits/9BibTeX citation
@techreport{davila7-davila7-move-code-quality-2026,
author = {davila7},
title = {move-code-quality security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/davila7-move-code-quality/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "move-code-quality security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "davila7"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/davila7-move-code-quality/audits/9"
identifiers:
- type: other
value: "skillstore:davila7-move-code-quality:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
71
Community
83
Spec Compliance
What You Can Build
Modernize a Move Package
Find legacy syntax, manifest settings, and API patterns that should change for Move 2024.
Review a Move Pull Request
Check changed modules for naming, composability, parameter ordering, and current Sui conventions.
Improve Move Tests
Identify unnecessary scenarios, weak assertions, outdated attributes, and cleanup patterns in test modules.
Try These Prompts
Review One Move File
Review [file path] against the Move 2024 code quality checklist. Report prioritized findings with line numbers and concise fixes.
Audit a Move Manifest
Review [Move.toml path] for edition settings, implicit framework dependencies, and named address prefixes. Explain each issue and suggest a correction.
Review a Full Package
Analyze the Move package at [directory]. Include source and test modules, group findings by severity, and identify patterns that already follow guidance.
Plan a Move 2024 Migration
Compare [package directory] with Move 2024 and Sui 1.45+ conventions. Prioritize migration work, note compatibility assumptions, and propose staged changes.
Best Practices
- Define the review scope and target Move or Sui version before analysis.
- Review critical manifest and edition findings before style recommendations.
- Validate suggested changes with the formatter, compiler, and tests before merging.
Avoid
- Do not treat checklist compliance as proof of contract security.
- Do not apply every recommendation without considering package version and compatibility.
- Do not report vague findings without file locations, impact, and a concrete correction.
Frequently Asked Questions
Does this skill perform a security audit?
No. It reviews code quality conventions and may complement, but cannot replace, a dedicated smart contract security audit.
Which Move versions does it target?
The guidance targets Move 2024 and modern Sui conventions, including dependency behavior introduced in Sui 1.45+.
Can it review one file instead of a package?
Yes. Provide a specific Move file, manifest, function, test, or checklist category.
Can it fix findings automatically?
It can offer and apply changes when approved. Review and test every change before deployment.
Does it compile or test the package?
Only when suitable tools are available and execution is requested. Otherwise, it performs a source-based review.
What does the report include?
The report groups findings by priority and includes file locations, impact, recommended changes, and recognized good practices.