orca-per-workspace-env

SUSPICIOUS. The skill is largely aligned with its stated purpose, but its footprint is high-risk: it provisions external compute, snapshots authenticated environments, and forwards GitHub tokens into third-party runtimes. The main concern is disproportionate credential exposure to remote sandboxes/SSH hosts rather than clear malicious intent.