orca-sec-scans
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script from the Aqua Security official GitHub repository using a shell pipe. This follows the vendor's documented procedure for setting up the Trivy security scanner.
- [EXTERNAL_DOWNLOADS]: Fetches configuration templates and binary components from well-known sources including Aqua Security's GitHub and the Homebrew package manager.
- [COMMAND_EXECUTION]: Utilizes system utilities such as
trivy,curl,dig, andgitto perform source code auditing, repository analysis, and network service verification. - [DATA_EXFILTRATION]: Executes targeted network requests via
curlto verify server responses (HTTP status codes) and security headers (CORS). These diagnostic operations are used solely to validate authentication assumptions and public exposure risks during a security audit.
Audit Metadata