orca-cli
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill explicitly instructs the agent to re-run commands with escalated permissions if it encounters a 'runtime_access_denied' error, which constitutes an instruction to bypass sandbox constraints.\n- [COMMAND_EXECUTION]: The skill resolves and executes local binaries including
orca,orca-ide, andorca-devbased on environment variables likeORCA_CLI_COMMANDorORCA_DEV_REPO_ROOT.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests guidance at runtime through theORCA skills get orca-clicommand, which allows external tool output to influence agent behavior.\n - Ingestion points: Data fetched via the
ORCA skills get orca-clicommand described in SKILL.md.\n - Boundary markers: None identified in the provided instructions.\n
- Capability inventory: The skill allows execution of system commands, terminal management, and browser control via the Orca CLI.\n
- Sanitization: No validation or sanitization of the runtime-fetched guide is mentioned.
Recommendations
- AI detected serious security threats
Audit Metadata