orca-strategy

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/orca_config.py uses the subprocess.run function within the mcporter_call helper to interact with the platform's mcporter binary. Analysis of the call sites in scripts/orca-scanner.py and scripts/orca_config.py shows that the tool names (e.g., 'leaderboard_get_markets', 'strategy_get_clearinghouse_state') are hardcoded or derived from trusted internal logic, minimizing the risk of arbitrary command injection.
  • [SAFE]: The skill configuration and instructions follow the expected patterns for the Senpi trading ecosystem, including the use of environment variables for non-sensitive strategy IDs and wallets, and local file storage for session state.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 10:51 AM