verona-toolkit-init

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs point to direct installer scripts (.sh and .ps1) on a third-party GitHub repo and are used with curl|sh and irm|iex patterns—classic remote-execution vectors from an unverified/unknown publisher—so they are suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md instructs the user to run a runtime curl/irm installer that fetches installer scripts from GitHub URLs, which would be outsider-authored free text/code ingested by the agent/installer execution path (indirect prompt-injection risk).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs remote installers (curl ... | sh to https://github.com/burnt-labs/verona-agent-toolkit/releases/latest/download/verona-agent-toolkit-installer.sh and PowerShell irm ... | iex to https://github.com/burnt-labs/verona-agent-toolkit/releases/latest/download/verona-agent-toolkit-installer.ps1), and also documents git clone https://github.com/burnt-labs/verona-agent-toolkit and a raw GitHub guide https://raw.githubusercontent.com/burnt-labs/verona-agent-toolkit/main/INSTALL-FOR-AGENTS.md that would be fetched/executed at runtime, so these are runtime external dependencies that execute remote code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references "Treasury management for gasless transactions" and points agents to a verona-treasury skill (gasless operations) and a faucet for testnet tokens. Those are specific crypto/treasury management capabilities (wallet/treasury operations) — i.e., tools designed to move or manage funds — so this qualifies as direct financial execution authority.