orca-cli
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to resolve the
orcaCLI path using environment variables such asORCA_CLI_COMMANDandORCA_DEV_REPO_ROOT, or fallback names likeorca-ideandorca-dev. - [COMMAND_EXECUTION]: The agent is directed to execute specific commands (
status,worktree ps,terminal list) to interact with the Orca environment. - [PROMPT_INJECTION]: The skill uses a pattern where the agent retrieves its full command guide by executing
ORCA skills get orca-cli. This creates an ingestion point for tool-generated instructions. - Ingestion points: The stdout from the
ORCA skills get orca-clicommand. - Boundary markers: None; the skill instructs the agent to read and follow the returned guide.
- Capability inventory: The skill allows shell command execution through the
orcabinary. - Sanitization: None; the agent is instructed to trust the output of the local binary as its usage guide.
Audit Metadata