orca-cli
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill employs a pattern where instructions are retrieved dynamically from a local executable at runtime.
- Ingestion points: The agent is instructed in
SKILL.mdto runORCA skills get orca-cliand use the resulting output as the full usage guide. - Boundary markers:
SKILL.mddoes not define specific delimiters or instructions to ignore potential commands embedded within the dynamic output. - Capability inventory: As described in
SKILL.md, the skill possesses capabilities to operate worktrees, repositories, terminals, and an embedded browser through shell commands. - Sanitization: No sanitization or validation of the content returned by the binary is specified in
SKILL.mdbefore processing it as instructions. - [COMMAND_EXECUTION]: The skill is fundamentally designed to execute commands via the
orcaCLI to manage developer worktrees, terminals, and automation tasks.
Audit Metadata