verona-dev

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly a router/documentation layer, and its scope broadly matches that purpose, but its primary behavior is transitive installation/loading of other skills, including a second repository. That trust expansion is proportionate to its routing role yet still materially raises risk even without direct exfiltration or credential handling in this file.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 16, 2026, 02:31 PM
Package URL
pkg:socket/skills-sh/burnt-labs%2Fverona-agent-toolkit%2Fverona-dev%2F@3a62dd518f93ef49604ef256fa75fc659c03da36c62afe89c9df7748fb255299
Security Audit — socket — verona-dev