orca-strategy
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/orca_config.pyuses thesubprocess.runfunction within themcporter_callhelper to interact with the platform'smcporterbinary. Analysis of the call sites inscripts/orca-scanner.pyandscripts/orca_config.pyshows that the tool names (e.g., 'leaderboard_get_markets', 'strategy_get_clearinghouse_state') are hardcoded or derived from trusted internal logic, minimizing the risk of arbitrary command injection. - [SAFE]: The skill configuration and instructions follow the expected patterns for the Senpi trading ecosystem, including the use of environment variables for non-sensitive strategy IDs and wallets, and local file storage for session state.
Audit Metadata