aster-deposit-fund

SUSPICIOUS. The skill's capabilities broadly match its stated purpose, and it uses direct RPC/on-chain flows rather than an obvious credential-harvesting proxy. However, it asks the agent to handle a raw private key and perform financial transactions, which is high impact by design, and it relies on locally installed code/dependencies without strong reproducibility or provenance controls in the instructions.