aster-deposit-fund

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bun runtime to execute local JavaScript files (deposit.mjs, balance.mjs) for blockchain interactions such as balance checks and transaction signing.- [SAFE]: Sensitive credential management for the ASTER_DEPOSIT_PRIVATE_KEY follows security best practices: the key is validated via regex, deleted from process.env immediately after use to reduce memory exposure, and redacted from all error logs to prevent accidental leakage.- [SAFE]: The skill enforces a mandatory human-in-the-loop confirmation process, requiring the agent to display a transaction summary and receive explicit user consent before any on-chain action.- [SAFE]: Destination treasury addresses for supported chains (Ethereum, BSC, Arbitrum) are hardcoded within the skill's source code, which mitigates the risk of address substitution or oracle-based redirection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 04:48 PM