verona-faucet
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to provide a CLI interface for the Xion testnet faucet. This behavior is consistent with its documented purpose and aligns with standard blockchain development workflows.
- [SAFE]: Sensitive state-changing operations, specifically the claiming of tokens, are protected by a prerequisite for authentication via the
verona-oauth2skill, ensuring secure access control. - [SAFE]: Input parameters such as the receiver address are constrained by format definitions in the JSON schemas (
verona-address), enabling validation of user input before it is passed to shell commands and reducing the risk of command injection. - [SAFE]: All referenced tools and dependencies (
verona-toolkit,verona-oauth2,verona-toolkit-init) are vendor resources originating from the same author (burnt-labs), and no suspicious remote code execution or exfiltration patterns were detected.
Audit Metadata