be careful using mini-apps - use the same security precaution you use with other defi protocols etc and report any which are malicious