orca-dispatch-reference
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core dispatch/reference purpose mostly matches the commands shown, but the skill exceeds a simple reference by directing real external actions, forwards bearer-authenticated data to a non-obviously official AgentMemory domain, and disables TLS verification with curl -k. External CLI/hook dependencies are partly verifiable but still increase trust and interception risk.
Confidence: 86%Severity: 78%
Audit Metadata