verona-treasury

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned and routes actions through expected Verona/Xion tooling, but it is still high risk because it authorizes financial blockchain operations and delegated spending permissions. It does not show clear malware or credential-harvesting behavior, yet it should be treated as sensitive due to real asset movement and grant management.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Jul 16, 2026, 02:31 PM
Package URL
pkg:socket/skills-sh/burnt-labs%2Fverona-agent-toolkit%2Fverona-treasury%2F@6fc0d5131ca856c760f7e3266fa75c8c01c8119b81d8fa8976f138d2345cec3f
Security Audit — socket — verona-treasury