orca-cli
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute a local CLI binary (
orca,orca-ide, ororca-dev) to interact with development environments. It includes specific logic to select the correct executable based on environment variables and platform context to avoid conflicts with system tools. - [INDIRECT_PROMPT_INJECTION]: The skill dynamically loads its full instruction set by running a local command (
ORCA skills get orca-cli). While this introduces new content into the agent's context at runtime, it is a standard mechanism for maintaining version parity with the installed software.
Audit Metadata