orca-impact-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, persistence mechanisms, or privilege escalation attempts were detected. The skill follows established patterns for cloud security analysis.
- [EXTERNAL_DOWNLOADS]: The skill instructions specify communication with Orca Security's official API endpoint (api.orcasecurity.io) to fetch alert data and CloudTrail/audit logs for breakage simulation. This is documented vendor behavior.
- [COMMAND_EXECUTION]: The skill uses specific platform tools (e.g., get_alert, search_cdr_events, get_aws_effective_permissions_policy_on_asset) to gather necessary context. These tools are used as intended for data retrieval and analysis within the platform.
- [DATA_EXFILTRATION]: Network activity is restricted to the vendor's known infrastructure. No patterns suggesting the exfiltration of sensitive files or credentials to unauthorized third parties were identified.
Audit Metadata