These are attributes returned from Facebook, rather than Auth0 attributes. You can learn more about them in the Facebook documentation:
verified:
Indicates whether the account has been
verified. This is distinct from the
is_verified field. Someone is
considered verified if they take any
of the following actions: Register for
mobile Confirm their account via SMS
Enter a valid credit card
is_verified:
People with large numbers of followers
can have the authenticity of their
identity manually verified by
Facebook. This field indicates whether
the person’s profile is verified in
this way. This is distinct from the
verified field