compute-resell
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is broadly aligned with its stated compute-reselling purpose, but it is high risk because it autonomously takes marketplace actions with financial consequences and forwards provider credentials to external services. The biggest integrity concern is the AWS design: an arbitrary BEDROCK_BASE_URL proxy can receive credentials and traffic, which is disproportionate unless tightly controlled. No confirmed malware or hidden execution is present, but the autonomy and credential-delegation footprint are substantial.
Confidence: 91%Severity: 82%
Audit Metadata