📦

orca-cli

Name: orca-cli
Author: agc2020

Revisão do conteúdo r1 Risco Médio ⚙️ Comandos externos

Load Orca CLI Guidance for Your Workspace

Using the wrong Orca executable can target another build or launch an unrelated program. This skill selects the session executable and retrieves its version-matched guide.

Suporta: Claude Codex Code(CC)

📊 70 Adequado

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "orca-cli" from https://skillstore.io/skills/agc2020-orca-cli.md and its manifest at https://skillstore.io/api/skills/agc2020-orca-cli/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/agc2020-orca-cli.md manifest assinado GET /api/skills/agc2020-orca-cli/manifest lockfile assinado GET /api/skills/agc2020-orca-cli/lockfile

Testar

Usando "orca-cli". Which executable should I use on Linux outside an Orca-managed terminal?

Resultado esperado:

Use orca-ide unless a higher-priority session rule applies. Bare orca may launch the GNOME screen reader.

Usando "orca-cli". The selected executable cannot run. Should I try another Orca build?

Resultado esperado:

Report the exact error and stop. Switching executables may target a different Orca build.

Usando "orca-cli". The guide command is unknown in my Orca installation.

Resultado esperado:

Update Orca to restore guide retrieval. Until then, use CLI help for read-only discovery and do not guess unsupported commands.

Auditoria de segurança

Risco Médio

v1 • 13/10/2026 Abrir o relatório versionado

All 18 static findings are false positives caused by Markdown formatting and references to shell names. A separate semantic concern is unconditional permission escalation after sandbox denial. No evidence found of credential theft, exfiltration, or audit manipulation in the reviewed stub; the runtime-loaded guide was unavailable for review.

Arquivos analisados

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Médio

SKILL.md:44-45

Permission Escalation Without an Explicit Approval Condition

After runtime_access_denied, the stub directs agents to "re-run it with escalated permissions" without requiring authorization. This can encourage crossing a sandbox boundary automatically.

The escalation instruction is explicit and unconditional. Actual unauthorized access depends on the host approval controls; no successful bypass is shown.

Fatores de risco

⚙️ Comandos externos (18)

SKILL.md:5 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:29 SKILL.md:30 SKILL.md:38-40 SKILL.md:40-42 SKILL.md:42 SKILL.md:43-44 SKILL.md:44-45 SKILL.md:45-46 SKILL.md:46 SKILL.md:31 SKILL.md:31

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/agc2020-orca-cli/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/agc2020-orca-cli/security.svg)](https://skillstore.io/skills/agc2020-orca-cli?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/agc2020-orca-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agc2020-orca-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/agc2020-orca-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

agc2020. (2026). orca-cli security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/agc2020-orca-cli/audits/1

Citação BibTeX

@techreport{agc2020-agc2020-orca-cli-2026,
  author = {agc2020},
  title = {orca-cli security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/agc2020-orca-cli/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "orca-cli security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "agc2020"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/agc2020-orca-cli/audits/1"
identifiers:
  - type: other
    value: "skillstore:agc2020-orca-cli:audit:1"
    description: "Skillstore immutable audit report identifier"

Comparar variantes

6 variantes instaláveis

Cada autor permanece como um skill instalável separado. A variante recomendada é classificada pelas evidências do Skillstore.

Por que esta variante está em primeiro

Maior pontuação do Skillstore

Autor / fonte Pontuação do Skillstore Confiança das evidências Uso no Skillstore Atualizado

vjk7989 Recomendado

vjk7989-orca-cli

Pontuação do Skillstore 78

Confiança das evidências Médio

Uso no Skillstore 4

Atualizado

2026-09-09

agc2020 Atual

agc2020-orca-cli

Pontuação do Skillstore 70

Confiança das evidências Médio

Uso no Skillstore Desconhecido

Atualizado

2026-10-15

kerenski

kerenski-orca-cli

Pontuação do Skillstore 69

Confiança das evidências Médio

Uso no Skillstore 18

Atualizado

2026-09-09

zpyoung

zpyoung-orca-cli

Pontuação do Skillstore 69

Confiança das evidências Médio

Uso no Skillstore 2

Atualizado

2026-10-11

stablyai

stablyai-orca-cli

Pontuação do Skillstore 38

Confiança das evidências Médio

Uso no Skillstore 8

Atualizado

2026-09-09

phucd

phucd-orca-cli

Pontuação do Skillstore 38

Confiança das evidências Médio

Uso no Skillstore Desconhecido

Atualizado

2026-10-13

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Prepare a Development Session

Select the correct Orca executable and load its guide before managing worktrees.

Prepare an Agent Handoff

Retrieve current CLI guidance before coordinating another agent through Orca-managed terminals.

Diagnose CLI Availability

Identify executable errors, missing guide support, or runtime access restrictions without guessing unsupported commands.

Teste estes prompts

Find the Session Executable

Determine the Orca executable for this session using the skill rules. Explain your selection without changing workspace state.

Load Current Guidance

Resolve the Orca executable and retrieve its orca-cli guide. Summarize available operations without executing workspace changes.

Diagnose a Guide Error

Investigate why the Orca guide cannot load. Report the exact error and use read-only help where supported. Do not escalate without approval.

Plan a Worktree Handoff

Load the matching Orca guide and plan a child-worktree handoff to another agent. Confirm supported commands and request approval before state changes.

Boas práticas

Resolve the executable once and reuse it throughout the session.
Load the matching guide before workspace operations and prefer JSON output.
Respect sandbox restrictions and obtain required approval before requesting additional access.

Evitar

Running bare orca on Linux outside a managed terminal without checking executable-selection rules.
Switching to a different Orca executable after the selected one fails.
Guessing unsupported commands or treating sandbox denial as automatic permission to escalate.

Perguntas frequentes

What does this skill include?

It includes executable-selection and guide-loading instructions. Detailed operation guidance comes from the selected Orca executable.

Does this skill install Orca?

No. An available Orca executable is required.

Which AI tools are listed as supported?

The marketplace metadata lists Claude, Codex, and Claude Code.

Why should I avoid bare orca on Linux?

Outside Orca-managed terminals, it may resolve to the GNOME screen reader. The skill selects orca-ide unless a higher-priority rule applies.

What happens if guide retrieval is unsupported?

The stub recommends updating Orca and using help for read-only discovery. It prohibits guessing unsupported commands.

Does sandbox denial permit automatic escalation?

No. Follow host policy and obtain required approval. If escalation is unavailable or denied, report the restriction and stop.

Detalhes do desenvolvedor

Autor

agc2020

Licença

MIT

Revisão da Skillstore

Aviso de versão

O autor não declarou uma versão.

Repositório

https://github.com/agc2020/orca/tree/5e9489c0c01f263c1fb57f73c52d21988ee7dcdd/skills/orca-cli

Referência

ffae4ad95b0b2593c17cd4c3bbe46f81c29019c2

Atualidade da manutenção

15/10/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📄 SKILL.md