orca-cli
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute a local command-line interface (orca, orca-dev, or orca-ide) to manage worktrees, terminals, and browser sessions. The specific binary is resolved at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch additional instructions at runtime via the 'ORCA skills get orca-cli' command. Ingestion points: Instructions are ingested from the output of the local binary. Boundary markers: The skill lacks explicit delimiters or instructions for the agent to ignore potentially malicious content within the dynamically loaded guide. Capability inventory: The skill facilitates shell command execution and OS-level browser control via the CLI. Sanitization: There is no documented validation or filtering of the content returned by the CLI tool.
- [DYNAMIC_EXECUTION]: The path to the executable is determined at runtime using environment variables such as ORCA_CLI_COMMAND and ORCA_DEV_REPO_ROOT.
Audit Metadata