orca-cli
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
BENIGN. The skill is internally consistent with its stated purpose: controlling an already-installed Orca runtime for worktrees, terminals, and browser automation. Main concerns are operational risk from broad browser/terminal powers and prompt-injection exposure from untrusted web content, not deceptive install behavior or clear credential harvesting.
Confidence: 87%Severity: 63%
Audit Metadata