order-compute

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is mostly coherent for paid disposable compute, and the npm package source is better than a raw downloader. But it enables irreversible financial transactions, installs transitive MCP tooling, and routes purchases and SSH provisioning through a third-party gateway, creating meaningful security and trust risk beyond a typical compute helper.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Oct 26, 2026, 03:40 PM
Package URL
pkg:socket/skills-sh/celo-org%2Fbuy-skill%2Forder-compute%2F@e903f4f37d3eb2b2155dcbf52a7d9149b153949172cc09476ab7cf7ce7ac7188