First of all, everything is encrypted and handled securely. Private keys aren't exposed, and sensitive data is stored in a protected environment. I'll be making the repo public soon as well, so everyone will be able to check the code and verify everything themselves.
Second, I keep seeing people say "why would I put my assets into a bot?" - but who said you need to?
All you need is a little gas. just use the free mint option, mint the asset, and that's it. You can list it, transfer it, or immediately move it to your own wallet right after minting if that's what you prefer.
The bot isn't asking you to deposit your assets or leave them sitting there. It's simply making the minting process easier and faster.
That's all there is to it. Once the repo is public, everyone can review how it works and decide for themselves.
Generating or importing wallets into a third-party bot requires a high level of trust. If the service is compromised or malicious, your assets could be drained.