skills/stablyai/orca/orca-jira/Gen Agent Trust Hub

orca-jira

Warn

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill resolves and executes various CLI commands (such as orca, orca-dev, orca-ide, or the path specified in the ORCA_CLI_COMMAND environment variable) to interact with Jira systems.
  • [PRIVILEGE_ESCALATION]: The instructions explicitly direct the agent to re-run commands with escalated permissions if it encounters a runtime_access_denied error, which is an instruction to bypass sandbox constraints.
  • [DYNAMIC_EXECUTION]: The skill uses the ORCA skills get orca-jira command to dynamically fetch and load a version-matched guide at runtime, introducing instructions that are not present in the static skill file.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from Jira issue fields, comments, and labels, which are identified as untrusted sources.
  • Ingestion points: Jira issue data, including comments and labels, are read through the CLI into the agent's context.
  • Boundary markers: While the description warns to treat fields as untrusted, there are no structural boundary markers or specific instructions for the agent to use delimiters when processing this data.
  • Capability inventory: The skill possesses command execution capabilities through the Orca CLI tools.
  • Sanitization: No specific sanitization, filtering, or escaping mechanisms for the ingested Jira data are described.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 14, 2026, 10:54 AM