I doubt there's any serious risk of criminal liability here. The key for most crimes is showing (human) intent (by the coders, the operators, or someone). The i

I doubt there's any serious risk of criminal liability here. The key for most crimes is showing (human) intent (by the coders, the operators, or someone). The intent to purchase random items for art via some automated process isn't the same as the intent to purchase drugs for personal use. That said, if you decide to keep any drugs you get from the not rather than immediately disposing of them, you've demonstrated the requisite intent to be guilty of possession, so there's that.