aster-deposit-fund
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bun runtime to execute local JavaScript files (
deposit.mjs,balance.mjs) for blockchain interactions such as balance checks and transaction signing.- [SAFE]: Sensitive credential management for theASTER_DEPOSIT_PRIVATE_KEYfollows security best practices: the key is validated via regex, deleted fromprocess.envimmediately after use to reduce memory exposure, and redacted from all error logs to prevent accidental leakage.- [SAFE]: The skill enforces a mandatory human-in-the-loop confirmation process, requiring the agent to display a transaction summary and receive explicit user consent before any on-chain action.- [SAFE]: Destination treasury addresses for supported chains (Ethereum, BSC, Arbitrum) are hardcoded within the skill's source code, which mitigates the risk of address substitution or oracle-based redirection attacks.
Audit Metadata