orca-cli
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing local command-line binaries (orca, orca-dev, or orca-ide) to manage developer environments, including worktrees, terminals, and a built-in browser. The specific executable is resolved based on session environment variables like ORCA_CLI_COMMAND or ORCA_DEV_REPO_ROOT.
- [PROMPT_INJECTION]: The skill instructs the agent to dynamically ingest its command guide from the output of 'ORCA skills get orca-cli'. While this is an intended feature for version synchronization, it represents a surface for indirect prompt injection if the tool's documentation output were to be manipulated. 1. Ingestion points: Standard output of the 'ORCA skills get' command. 2. Boundary markers: Absent in the discovery stub. 3. Capability inventory: Terminal control, filesystem management via worktrees, and browser manipulation via the ORCA binary. 4. Sanitization: None; the agent is directed to read the output and then run the required commands.
Audit Metadata