📦
Histórico de auditoria
orca-cli - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 15:35
All 18 static findings are false positives caused by Markdown formatting and references to shell names. A separate semantic concern is unconditional permission escalation after sandbox denial. No evidence found of credential theft, exfiltration, or audit manipulation in the reviewed stub; the runtime-loaded guide was unavailable for review.
1
Arquivos analisados
48
Linhas analisadas
2
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (1)
Médio
Permission Escalation Without an Explicit Approval Condition
After runtime_access_denied, the stub directs agents to "re-run it with escalated permissions" without requiring authorization. This can encourage crossing a sandbox boundary automatically.
The escalation instruction is explicit and unconditional. Actual unauthorized access depends on the host approval controls; no successful bypass is shown.
Fatores de risco
Auditado por: codex