orca-cli
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and follow instructions provided by the local
orcaCLI via theORCA skills get orca-clicommand. This creates an ingestion point for dynamic content to influence agent behavior. - Ingestion point: The output of the
ORCA skills get orca-clicommand. - Boundary markers: No specific delimiters are specified in the stub instructions.
- Capability inventory: The skill allows the agent to execute various shell commands through the
orcaCLI tool to manage worktrees, terminals, and repos. - Sanitization: No explicit sanitization of the CLI output is described in this discovery stub.
- [DYNAMIC_EXECUTION]: The skill employs dynamic instruction loading by retrieving its primary operating guide from the local environment at runtime, which ensures documentation is version-matched to the CLI tool.
Audit Metadata