orca-emulator-android
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to resolve and execute local command-line binaries such as
orca,orca-ide, ororca-dev. The choice of binary depends on environment variables likeORCA_CLI_COMMANDor the presence of a development repository root. - [PRIVILEGE_ESCALATION]: Troubleshooting instructions specify that the agent should re-run operations with escalated permissions if it encounters a
runtime_access_deniederror when attempting to connect to the emulator. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a stub that dynamically loads instructions at runtime, creating an attack surface for indirect prompt injection.
- Ingestion points: The agent is directed to run
ORCA skills get orca-emulator-androidand load the resulting output as a "version-matched guide" (SKILL.md). - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the content returned by the dynamic guide command.
- Capability inventory: The skill facilitates extensive control over Android devices via
adb, including hardware button manipulation, app installation, and modification of runtime permissions. - Sanitization: The instructions do not provide a mechanism for sanitizing or validating the instructions received from the dynamic loading process.
Audit Metadata