FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Overview · webdevtodayjason/orca-micro · GitHub

Security: webdevtodayjason/orca-micro

Security

SECURITY.md

Security policy

Orca Micro is experimental software derived from FreeMicro. Only this repository's current main branch is maintained here; upstream releases are maintained by their own project. There is no production support or response-time guarantee.

Trust boundaries

  • An imported Input profile is executable configuration: its Smart Actions can run shell commands as your user. Inspect commands before enabling them.
  • Input's command consent is a human-controlled setting. This project does not enable or bypass it.
  • Direct HID access needs macOS Input Monitoring; inherited synthetic-input features also need Accessibility. Grant only the permissions needed for the workflow you choose.
  • The Orca adapter invokes the locally configured Orca CLI. Orca may control local or remote workspaces according to your Orca configuration.
  • Layer polling is not a security boundary or exclusive hardware ownership. Do not use it to authorize unattended approvals or destructive actions.
  • --dry-run does not disable lighting configured separately or commands independently executed by Work Louder Input.

Reporting

Please do not publish exploit details in an issue. Use this repository's Security tab → Report a vulnerability if available. Otherwise open a "security contact request" issue without sensitive details so the maintainer can arrange a private channel.

Include the affected commit and a minimal reproduction. Redact project paths, serial numbers, tokens, command payloads, and terminal contents from logs.

Reports about vendor firmware, Input, ChatGPT, or Orca itself belong with those projects. Reports about this adapter, its profile, packaging, or command routing belong here. Preserve coordinated disclosure and attribution for upstream work.

There aren't any published security advisories


Back | FazBrowse Home | New Git URL