order-compute
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npxcommands to set up wallets, configure daily spend caps, and initiate payments via the Celo network. These operations involve interacting with the system keychain and managing local configuration files. - [EXTERNAL_DOWNLOADS]: The skill downloads and runs the
@celo/buy@0.5.0package from the npm registry. This resource is provided by the vendorcelo-org, matching the skill author. - [REMOTE_CODE_EXECUTION]: The skill provides a mechanism to transmit and execute shell scripts on remote Debian instances via the
usebuy.aigateway. While execution is isolated to the purchased VM, it constitutes a remote execution capability controlled by the agent. - [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill ingests user-provided scripts and SSH keys to be deployed to the rented VMs (found in
SKILL.md). 2. Boundary markers: The instructions include 'Non-negotiable boundaries' requiring the agent to quote exact costs and secure user approval before any transaction. 3. Capability inventory: The agent can perform blockchain transactions, execute shell commands locally, and manage remote VM instances. 4. Sanitization: The skill relies on human-in-the-loop oversight for financial transactions; however, user scripts are passed to the remote environment without automated sanitization.
Audit Metadata