OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill allows the agent to interact with the Orca CLI for development tasks like managing worktrees and terminals. While functional, it is susceptible to indirect prompt injection because it processes content from external or user-provided sources such as browser data and worktree comments.
Detected behaviors
No alerts
1 issue
Score: 93/100 · 2 sections analyzed