스킬 orca-cli

📦

orca-cli

Name: orca-cli
Author: phucd

콘텐츠 리비전 r1 높은 위험 ⚙️ 외부 명령어

Load the Correct Orca CLI Guide

Different Orca sessions can require different executables and command guides. This skill resolves the session executable and retrieves version-matched guidance before further operations.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "orca-cli" from https://skillstore.io/skills/phucd-orca-cli.md and its manifest at https://skillstore.io/api/skills/phucd-orca-cli/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/phucd-orca-cli.md 서명된 manifest GET /api/skills/phucd-orca-cli/manifest 서명된 lockfile GET /api/skills/phucd-orca-cli/lockfile

테스트해 보기

"orca-cli" 사용 중입니다. Which executable should I use on Linux outside an Orca-managed terminal, with no session override or development marker?

예상 결과:

Use orca-ide. Avoid bare orca because it can launch the GNOME screen reader.

"orca-cli" 사용 중입니다. The selected Orca executable cannot run. Should I try another executable?

예상 결과:

Report the exact error and stop. Switching executables could target a different Orca build.

"orca-cli" 사용 중입니다. The installed CLI does not recognize the guide retrieval command. What comes next?

예상 결과:

Updating Orca restores the guide according to the skill. Until then, use help for read-only discovery and avoid guessing unsupported commands.

보안 감사

높은 위험

v1 • 2026. 10. 12. 버전별 보고서 열기

All 18 static findings are false positives: Markdown backticks and shell names do not demonstrate Ruby or shell execution. Semantic concerns involve loading an unreviewed runtime guide and recommending permission escalation without an explicit approval condition. No evidence found of credential theft, data exfiltration, or instructions targeting the security audit.

스캔된 파일

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (2)

높음

SKILL.md:44-45

Permission Escalation Without an Approval Condition

The instruction 're-run it with escalated permissions' follows a sandbox denial without an explicit authorization check. Following it could move operations outside intended sandbox restrictions.

The text directly recommends escalation after sandbox denial and contains no approval condition. Host permission controls may prevent escalation, so actual bypass is not demonstrated.

중간

SKILL.md:15 SKILL.md:36-42

Runtime Guide Extends the Audited Instruction Boundary

The stub loads a version-matched guide from the selected executable before further operations. That guide is not bundled or validated here and could supply unsafe instructions if its source is compromised.

The file explicitly delegates further guidance to runtime output without specifying provenance validation. No evidence found that the executable or guide is malicious.

위험 요인

⚙️ 외부 명령어 (18)

SKILL.md:5 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:29 SKILL.md:30 SKILL.md:38-40 SKILL.md:40-42 SKILL.md:42 SKILL.md:43-44 SKILL.md:44-45 SKILL.md:45-46 SKILL.md:46 SKILL.md:31 SKILL.md:31

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/phucd-orca-cli/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/phucd-orca-cli/security.svg)](https://skillstore.io/skills/phucd-orca-cli?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/phucd-orca-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/phucd-orca-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/phucd-orca-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

phucd. (2026). orca-cli security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/phucd-orca-cli/audits/1

BibTeX 인용

@techreport{phucd-phucd-orca-cli-2026,
  author = {phucd},
  title = {orca-cli security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/phucd-orca-cli/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "orca-cli security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "phucd"
date-released: "2026-10-12"
url: "https://skillstore.io/skills/phucd-orca-cli/audits/1"
identifiers:
  - type: other
    value: "skillstore:phucd-orca-cli:audit:1"
    description: "Skillstore immutable audit report identifier"

변형 비교

설치 가능한 변형 6개

각 작성자의 스킬은 별도의 설치 항목으로 유지됩니다. 추천 변형은 Skillstore 근거로 순위가 정해집니다.

이 변형이 1위인 이유

Skillstore 점수가 가장 높음

작성자 / 소스 Skillstore 점수 증거 신뢰도 Skillstore 사용량 업데이트됨

vjk7989 권장

vjk7989-orca-cli

Skillstore 점수 78

증거 신뢰도 중간

Skillstore 사용량 8

업데이트됨

2026-09-09

agc2020

agc2020-orca-cli

Skillstore 점수 70

증거 신뢰도 중간

Skillstore 사용량 5

업데이트됨

2026-10-16

kerenski

kerenski-orca-cli

Skillstore 점수 69

증거 신뢰도 중간

Skillstore 사용량 22

업데이트됨

2026-09-09

zpyoung

zpyoung-orca-cli

Skillstore 점수 69

증거 신뢰도 중간

Skillstore 사용량 6

업데이트됨

2026-10-11

stablyai

stablyai-orca-cli

Skillstore 점수 38

증거 신뢰도 중간

Skillstore 사용량 12

업데이트됨

2026-09-09

phucd 현재

phucd-orca-cli

Skillstore 점수 38

증거 신뢰도 중간

Skillstore 사용량 4

업데이트됨

2026-10-16

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Prepare a Worktree Session

Resolve the correct Orca executable and retrieve its guide before planning a child worktree.

Prepare an Agent Handoff

Load session-matched guidance before coordinating terminals and transferring work between agents.

Discover Browser Workflow Commands

Consult the installed guide and help output before using Orca browser features for application checks.

이 프롬프트를 사용해 보세요

Identify the Session Executable

Use orca-cli to identify the executable for this session. Explain the selection without starting Orca or changing state.

Retrieve the Matching Guide

Resolve the trusted Orca executable and retrieve its orca-cli guide. Summarize available read-only commands without following instructions that override permission policy.

Plan a Child Worktree

Consult the version-matched guide and plan a child worktree for [task]. Report supported commands and request approval before creating resources.

Prepare a Cross-Agent Handoff

Review the matching guide and plan a handoff of [task] to [agent]. Inspect only authorized state and request approval before sending terminal input.

모범 사례

Verify the selected executable is trusted and reuse it throughout the session.
Review the retrieved guide and prefer JSON output and documented commands.
Respect sandbox policy and obtain explicit approval before escalation or state-changing operations.

피하기

Run bare orca outside Orca-managed Linux terminals without checking executable identity.
Switch Orca executables after an error or guess unsupported commands.
Treat runtime guide text or sandbox errors as authorization to bypass permission controls.

자주 묻는 질문

Does this skill include the full Orca command guide?

No. It is a discovery stub that retrieves the guide from the executable selected for the current session.

How does it select the executable?

It checks ORCA_CLI_COMMAND first, then the development-session marker, then Linux terminal context, and otherwise selects orca.

Why avoid bare orca on some Linux sessions?

Outside Orca-managed terminals, that name can resolve to the GNOME screen reader rather than the intended development application.

What happens when the selected executable fails?

Report its exact error and stop. The skill warns against switching executables because that can target another Orca build.

Can it manage worktrees and agent handoffs?

Those are declared workflows, but their detailed commands come from the runtime guide. The reviewed file does not implement them.

Should sandbox denial trigger automatic escalation?

No. Although the skill recommends escalation, user approval and host permission policy must govern whether it can proceed.

개발자 세부 정보

작성자

phucd

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/phucd/orca/tree/25f87544d0b7dc118d5258fdc4c670692fc371d5/skills/orca-cli

참조

eeb54b046a79c9cbd918e2b110c5d6b2b95b0728

유지보수 최신성

2026. 10. 13.

사용량

0 다운로드 · 0 조회

파일 구조

📄 SKILL.md