verona-faucet
Warn
Audited by Snyk on Jul 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly provides blockchain transaction execution for a cryptocurrency faucet: it exposes a CLI "claim" command that creates/sends transactions (returns tx_hash), supports delegating claims to another address, requires authentication to sign transactions, and documents the Execute Messages (e.g., {"faucet": {}}, {"delegate": {"receiver_address": "..."}}). These are specific crypto/blockchain operations (signing/sending tokens), so it grants direct financial execution capability (even though limited to testnet).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata