orca-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes Orca runtime commands such as ORCA goto --url and ORCA snapshot --json for the built-in browser, where page content is treated as untrusted fetched from arbitrary URLs authored by outsiders, and that fetched text can be ingested by the agent during snapshot/surface interactions.