zest-yield-manager

SUSPICIOUS: the skill is purpose-aligned and shows no clear credential theft or covert exfiltration, but it enables autonomous on-chain financial actions with real funds and signing authority. Main risk is agent-driven asset movement, not malware.