orca-emulator-android
Warn
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent that if a command fails with
runtime_access_denied, it should "re-run it with escalated permissions." This encourages the execution of tools with root or administrator privileges. - [DYNAMIC_EXECUTION]: The skill uses a resolution logic for the primary executable (placeholder
ORCA) based on the presence of environment variables (ORCA_CLI_COMMAND,ORCA_DEV_REPO_ROOT) or the host operating system. This results in the execution of different binaries depending on the environment context. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and follow instructions from an external command output.
- Ingestion points: The output of the command
ORCA skills get orca-emulator-androidis loaded as a guide for the session. - Boundary markers: None identified; the instructions are treated as authoritative guides for the session.
- Capability inventory: The skill is capable of executing shell commands for device control, including
adb, app installation, and system property modification. - Sanitization: No evidence of sanitization or validation of the fetched guide content before processing.
- [COMMAND_EXECUTION]: The skill relies on executing various CLI tools (
orca,orca-ide,orca-dev,adb) to perform its primary functions, including device emulation and app management.
Audit Metadata