verona-treasury
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages treasury contracts on the Xion blockchain using the
verona-toolkitCLI. All operations are documented and match the stated purpose of the skill. - [COMMAND_EXECUTION]: Scripts use safe array-based expansion for executing shell commands, protecting against command injection vulnerabilities from user-supplied arguments.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. Audit logs are stored locally at
$HOME/.verona-toolkit/audit.logfor transparency and troubleshooting. - [PROMPT_INJECTION]: Instructions and metadata were reviewed for injection patterns, such as system prompt extraction or safety guideline bypasses; none were found.
- [CREDENTIALS_UNSAFE]: The skill does not contain hardcoded secrets. It correctly instructs users to authenticate using a separate OAuth2 skill, adhering to secure credential management practices.
Audit Metadata