verona-faucet

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to provide a CLI interface for the Xion testnet faucet. This behavior is consistent with its documented purpose and aligns with standard blockchain development workflows.
  • [SAFE]: Sensitive state-changing operations, specifically the claiming of tokens, are protected by a prerequisite for authentication via the verona-oauth2 skill, ensuring secure access control.
  • [SAFE]: Input parameters such as the receiver address are constrained by format definitions in the JSON schemas (verona-address), enabling validation of user input before it is passed to shell commands and reducing the risk of command injection.
  • [SAFE]: All referenced tools and dependencies (verona-toolkit, verona-oauth2, verona-toolkit-init) are vendor resources originating from the same author (burnt-labs), and no suspicious remote code execution or exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 02:30 PM
Security Audit — agent-trust-hub — verona-faucet