orca-cli
Fail
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The instructions explicitly direct the agent to "re-run it with escalated permissions" if a command fails with a
runtime_access_deniederror due to sandbox blocks. This is a direct attempt to bypass security boundaries established by the execution environment. - [DYNAMIC_EXECUTION]: The skill functions as a "discovery stub" that does not contain its own logic. Instead, it instructs the agent to load task-specific guides at runtime using the
ORCA skills get orca-clicommand. This dynamic loading of instructions means the agent's actual behavior is determined by content not present in the static skill definition. - [COMMAND_EXECUTION]: The skill executes local binaries (
orca,orca-ide, ororca-dev) and determines which executable to use based on environment variables likeORCA_CLI_COMMANDandORCA_DEV_REPO_ROOT. It also includes instructions to start services usingORCA openif they are not already running.
Recommendations
- AI detected serious security threats
Audit Metadata