orca-exposure-map

Map external attack surface with exposure vectors and risk rankings.

47|7|Updated May 3, 2026
One-click install
npx skills add https://github.com/orcasecurity/orca-skills --skill orca-exposure-map
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: orca-exposure-map
Source: https://github.com/orcasecurity/orca-skills/tree/main/skills/orca-exposure-map
Command: npx skills add https://github.com/orcasecurity/orca-skills --skill orca-exposure-map

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Maps the external attack surface by identifying internet-facing assets, their exposure vectors, and attacker-facing risk rankings.

Core Features & Use Cases

  • Discovery of internet-facing assets across accounts with risk-based prioritization.
  • Categorization by exposure vector (public services, storage, web apps, management ports).
  • Drill-down enrichment for top assets (alerts, attack paths, crown jewels) to guide remediation.

Quick Start

Start by running the exposure map to generate a full external view and then drill into the top-risk assets.

Frequently Asked Questions about orca-exposure-map

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify internet-facing assets and rank them by attack risk?

This Skill maps the external attack surface by identifying internet-facing assets and their exposure vectors, categorizing them by public services, storage, web apps, or management ports, and applying attacker-focused risk rankings for prioritized remediation.

What is an external attack surface exposure map?

An external attack surface exposure map identifies internet-facing assets across accounts or environments, categorizes their exposure vectors, and applies risk rankings to prioritize targets for remediation based on attacker-focused risk.

How do I map public services and management ports for security ops?

You map public services and management ports by running discovery queries across multiple exposure categories, which classify internet-facing assets and produce prioritized remediation targets based on their exposure levels.

Can I filter the attack surface discovery by asset type or exposure vector?

Yes, you can filter attack surface discovery by asset type or exposure vector. The Skill applies these filters across accounts or environments to map internet-facing assets and generate prioritized remediation targets.

How do I drill down into top risk assets after mapping the attack surface?

After mapping the attack surface, you drill down into top risk assets using optional enrichment to retrieve alerts, attack paths, and crown jewel data, which guides targeted remediation efforts.

Does the exposure map require any dependencies to rank internet-facing assets?

No, the exposure map requires no external dependencies to rank internet-facing assets, as it natively implements data gathering, enrichment, and classification steps using discovery queries.