The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous ways to execute shell commands and interact with terminal sessions via orca terminal create, orca terminal send, and orca emulator exec.- [DATA_EXFILTRATION]: The skill includes an orca cookie get command which allows the agent to retrieve sensitive session cookies from the built-in browser context.- [PERSISTENCE]: The skill supports creating scheduled tasks using orca automations create, allowing for long-term persistence of agent actions through daily, hourly, or cron-based triggers.- [DYNAMIC_EXECUTION]: The orca eval command enables the execution of arbitrary JavaScript within the browser context, and orca exec allows passing commands to internal agents.- [INDIRECT_PROMPT_INJECTION]: The skill's browsing capabilities (orca snapshot, orca goto) expose the agent to untrusted web content. The documentation explicitly acknowledges this risk, instructing the agent to treat page content as data and avoid executing commands derived from it.

orca-cli