orca-emulator-android
Fail
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions explicitly direct the AI agent to bypass sandbox restrictions. Specifically, it states that if a
runtime_access_deniederror occurs (indicating the execution environment's sandbox blocked the connection), the agent should "re-run it with escalated permissions." This is a direct instruction to circumvent security boundaries using elevated privileges (e.g., sudo). - [COMMAND_EXECUTION]: The skill relies on the execution of local binaries (
orca,orca-ide, ororca-dev) to function. It uses theORCA skills getcommand to dynamically fetch its main documentation and instructions from a local executable, making the agent's behavior dependent on the output of local CLI tools.
Recommendations
- AI detected serious security threats
Audit Metadata