skills/machamy/orca/computer-use/Gen Agent Trust Hub

computer-use

Fail

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill explicitly instructs the agent to "re-run it with escalated permissions" if a runtime_access_denied error occurs. This encourages the agent to bypass existing security boundaries and sandbox constraints by acquiring higher privilege levels (e.g., using sudo or administrator access).
  • [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands using various executables resolved at runtime based on the environment, including orca, orca-ide, or paths specified in environment variables.
  • [EXTERNAL_DOWNLOADS]: The instruction to run ORCA skills get computer-use is designed to load a "version-matched guide" from the executable at runtime. This creates a dependency where the agent's behavior is modified by content fetched dynamically from an external tool or service.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 9, 2026, 02:41 PM