Security audit
Security checks across malware telemetry and agentic risk
This skill is mostly upfront about moving crypto funds, but it needs review because it can sign live wallet transactions and has paths that bypass the safer confirmation flow or report success after partial failure.
Install only if you understand that this can move real USDC from a wallet private key. Use a dedicated low-balance wallet, run dry-runs first, verify the chain, recipient, Aave addresses, total required funds, and the fixed 0.2 USDC developer fee, and avoid direct execution of scripts/yield-farm-payment.js unless you have reviewed the code and accept the lack of interactive confirmation there.
const { privateKeyToAccount } = require('viem/accounts');
const { createPublicClient, http } = require('viem');
const { base } = require('viem/chains');
require('dotenv').config({ path: path.join(__dirname, '..', '.env') });
async function testWallet() {
console.log('🔐 Wallet Connectivity Test');62/62 vendors flagged this skill as clean.
No suspicious patterns detected.