orca-cli
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies and executes local binaries (
orca,orca-dev, ororca-ide) based on the presence of environment variables or the development environment context. - Evidence: The instructions in
SKILL.mddirect the agent to resolve the executable path usingORCA_CLI_COMMANDorORCA_DEV_REPO_ROOTand subsequently run subcommands likestatus,open, andterminal list. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch its full operational guide dynamically by executing a command on the local system.
- Ingestion points: The agent is instructed to run
ORCA skills get orca-cliand process the resulting output as the primary source of instructions for managing worktrees, terminals, and the browser. - Boundary markers: Absent; there are no delimiters or instructions provided to the agent to treat the dynamic command output as potentially untrusted data.
- Capability inventory: The
orcabinary provides capabilities for terminal interaction (read/wait/send), file system management via worktrees, and controlling an embedded browser. - Sanitization: Absent; the skill lacks any validation or filtering mechanisms for the dynamic content fetched from the CLI tool.
Audit Metadata