order-compute
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and execute the@celo/buyNode.js package (version 0.6.0). This vendor-managed tool is used for account setup, wallet funding, and performing transactions via the service gateway. - [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of user-supplied scripts on remote Debian instances provisioned through the gateway. These instances are isolated from the user's local environment, run the script as root, and have restricted outbound network connectivity limited to DNS, HTTP/S, and NTP.
- [COMMAND_EXECUTION]: The instructions guide the agent to perform local command-line operations, including wallet configuration using the
@celo/buytool, API interactions viacurl, and establishing SSH connections to the provisioned remote VMs. - [INDIRECT_PROMPT_INJECTION]: The skill processes and reports output from scripts executed on remote VMs. The implementation mitigates injection risks by requiring explicit user approval for all financial transactions and utilizing sandboxed remote environments for processing potentially untrusted tasks.
Audit Metadata