orca-supply-chain-exposure
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses established Orca Security APIs (
discovery_search,get_asset_by_id, etc.) to perform inventory and vulnerability lookups. All network operations and data processing are directed toward the vendor's own platform for the purpose of supply chain risk assessment.\n- [SAFE]: The skill provides remediation guidance in common formats (Terraform, Helm, Ansible) and suggests manual verification commands (e.g.,npm ls), which are standard DevOps practices for patching vulnerabilities.\n- [SAFE]: No obfuscation, data exfiltration, or unauthorized privilege escalation patterns were detected. The skill operates within the expected scope of a security auditing tool.
Audit Metadata