orca-per-workspace-env
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes shell scripts (bash, PowerShell) to manage cloud resources and environment lifecycle stages. These scripts include robust error handling through cleanup traps and require user confirmation before executing potentially high-cost or long-running operations.
- [EXTERNAL_DOWNLOADS]: The skill orchestrates external operations including cloning Git repositories and installing dependencies via package managers (pnpm). It implements security controls such as non-interactive failure modes for Git auth to prevent hanging and uses established CLI tools.
- [DATA_EXFILTRATION]: While the skill manages sensitive configuration data like Git tokens and SSH identities, it strictly adheres to security best practices. It instructs the agent to use environment variables for secrets, utilizes secure GIT_ASKPASS helpers to avoid token leakage, and explicitly prohibits storing credentials in code, state files, or documentation.
Audit Metadata