verona-dev
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of official development tools and sub-skills from the author's GitHub organization (
burnt-labs). These downloads utilize standard package managers (npx) and point to verified vendor repositories. - [COMMAND_EXECUTION]: Includes a helper script
scripts/validate-params.shused to verify that JSON arguments provided to other skills match their respective schemas. The script usesjqfor parsing and implements checks for file existence and JSON validity before processing. - [SAFE]: Network configuration details provided in
SKILL.mdfor OAuth2 and RPC services (e.g.,oauth2.burnt.com,rpc.xion-mainnet-1.burnt.com) are official endpoints for the Xion blockchain managed by the vendor. No unauthorized data exfiltration or credential harvesting patterns were detected.
Audit Metadata