Orchata
ReviewAudited by ClawScan on May 1, 2026.
Overview
This is a coherent Orchata knowledge-base skill, but it gives an agent documented ways to read and change Orchata spaces and documents, so users should install it only if they want that level of access.
Before installing, confirm that you want your agent to use Orchata MCP tools for organization-level search and knowledge-base management. Use least-privilege Orchata access, keep sensitive spaces scoped, and require explicit confirmation for deletion, archive, bulk upload, or overwrite actions.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill could remove or archive a knowledge space if the Orchata MCP tool permits it.
The skill documents a space deletion/management action. This is purpose-aligned for knowledge-base administration, but it is a meaningful mutation that should be user-confirmed.
manage_space with action="delete" id="space_abc123"
Use clear user approval before delete, archive, bulk upload, or overwrite operations.
If connected to a privileged Orchata account, the agent may be able to discover or access many organization knowledge spaces.
The documented tools can operate at organization scope, which may expose more spaces or documents than a narrow task requires.
List all knowledge spaces in the organization.
Connect the skill through an account or MCP configuration limited to the spaces the agent actually needs.
Sensitive or untrusted documents added through this skill could persist in the knowledge base and affect future agent responses.
Uploaded or upserted content becomes part of a persistent RAG knowledge base and can influence later retrieval and answers.
save_document Upload or upsert documents (single or batch).
Only upload trusted content to appropriate spaces, and review changes to shared or long-lived knowledge bases.
Users have limited publisher/provenance context for deciding whether to trust the skill instructions.
The registry metadata does not provide a source repository or homepage for provenance review, although this artifact set contains no executable code or install step.
Source: unknown Homepage: none
Prefer a verified publisher, source link, or documentation for the Orchata MCP integration before granting access to sensitive knowledge bases.