orca-emulator
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the orca CLI to run commands on the host machine to manage and interact with iOS simulators, including the raw execution of strings via ORCA emulator exec.
- [EXTERNAL_DOWNLOADS]: The skill documentation references the use of npx serve-sim, which can trigger an external download of the package from the npm registry if it is not already available on the system.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests mobile UI metadata, which serves as a potential vector for indirect prompt injection from applications running within the simulator.
- Ingestion points: Ingests UI metadata through the accessibility tree via the ORCA emulator ax command in SKILL.md.
- Boundary markers: Absent. No specific delimiters or warnings for handling untrusted UI content are defined.
- Capability inventory: The skill can execute commands, simulate hardware buttons, perform text entry, and manage simulator permissions as described in SKILL.md.
- Sanitization: Absent. There is no mention of filtering or sanitizing the UI data before it is processed by the agent.
Audit Metadata