zest-asset-deposit-primitive
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the Zest V2 protocol using hardcoded, verified contract principals (e.g., SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.v0-4-market), minimizing the risk of interacting with malicious contracts.
- [SAFE]: Implements a mandatory --confirm=DEPOSIT flag for the run command, ensuring that no transactions are broadcast without explicit intent.
- [EXTERNAL_DOWNLOADS]: Communicates with api.hiro.so to fetch blockchain state and broadcast transactions. Hiro is a well-known service provider in the Stacks ecosystem, and these operations are documented and necessary for the skill's function.
- [SAFE]: Accesses local wallet session data (~/.aibtc/sessions/) and environment variables (STACKS_PRIVATE_KEY) to resolve the signer. This is a standard practice for signing transactions locally for this vendor's ecosystem.
Audit Metadata