compute-resell

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is broadly aligned with its stated compute-reselling purpose, but it is high risk because it autonomously takes marketplace actions with financial consequences and forwards provider credentials to external services. The biggest integrity concern is the AWS design: an arbitrary BEDROCK_BASE_URL proxy can receive credentials and traffic, which is disproportionate unless tightly controlled. No confirmed malware or hidden execution is present, but the autonomy and credential-delegation footprint are substantial.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Oct 9, 2026, 03:36 PM
Package URL
pkg:socket/skills-sh/aeonfun%2Faeon%2Fcompute-resell%2F@d430b53107d6fb2e75208600e0a98c0ae82a8d516156fb82c3fc71a0a7e1a506