orca-cli
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill resolves and executes local binaries such as
orca,orca-ide, ororca-devbased on the environment variables and operating system. It includes specific logic to select the correct executable and avoids using the genericorcacommand on Linux to prevent unintended interaction with the system screen reader. - [INDIRECT_PROMPT_INJECTION]: The skill bootstraps its functionality by fetching the latest operational guide through the
ORCA skills get orca-clicommand, which represents a runtime ingestion of instructions. - Ingestion points: The output generated by the local
orcabinary when executingskills get orca-cli. - Boundary markers: No explicit markers or delimiters are used to wrap the fetched content, as it is intended to replace or extend the current operational context.
- Capability inventory: The skill possesses the ability to control terminals, manage worktrees, and operate an embedded browser.
- Sanitization: The instructions fetched from the CLI are treated as authoritative and are not subjected to additional validation or sanitization before being processed by the agent.
Audit Metadata