orca-emulator
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill explicitly instructs the agent to re-run commands with escalated permissions if it encounters a
runtime_access_deniederror. This encourages the agent to perform actions outside of standard user privilege boundaries. - [COMMAND_EXECUTION]: The skill defines logic for the agent to execute local binaries (
orca,orca-dev, ororca-ide). The binary to be executed is resolved dynamically based on environment variables such asORCA_CLI_COMMANDandORCA_DEV_REPO_ROOT. - [EXTERNAL_DOWNLOADS]: The instruction to run
ORCA skills get orca-emulatoris described as fetching a "version-matched guide" from a remote source at runtime. This introduces external content into the agent's context that is not subject to initial skill auditing. - [INDIRECT_PROMPT_INJECTION]: By instructing the agent to load and follow a remote "guide" at runtime, the skill creates a surface where external, unvetted instructions can influence or override the agent's behavior during the session.
Audit Metadata