skills/karlorz/orca/computer-use/Gen Agent Trust Hub

computer-use

Fail

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructions explicitly direct the agent to bypass sandbox restrictions by escalating permissions. The text states: 'If it fails with runtime_access_denied, your sandbox blocked the connection: re-run it with escalated permissions'. This encourages the agent to seek higher privileges than those originally granted by the environment.
  • [COMMAND_EXECUTION]: The skill directs the agent to resolve and execute local command-line binaries (orca, orca-ide, or orca-dev) and to dynamically load additional instructions using ORCA skills get computer-use. While this is part of the tool's functionality, it provides a path for broad system interaction through the GUI and shell.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 26, 2026, 12:20 PM