order-compute
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill is mostly coherent for paid disposable compute, and the npm package source is better than a raw downloader. But it enables irreversible financial transactions, installs transitive MCP tooling, and routes purchases and SSH provisioning through a third-party gateway, creating meaningful security and trust risk beyond a typical compute helper.
Confidence: 89%Severity: 72%
Audit Metadata