orca-emulator
Fail
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to 're-run it with escalated permissions' if a 'runtime_access_denied' error occurs, which constitutes an instruction to bypass sandbox protections using administrative privileges.
- [COMMAND_EXECUTION]: The skill requires the agent to identify and execute local binaries (orca, orca-dev, orca-ide) to perform simulator operations.
- [EXTERNAL_DOWNLOADS]: The skill uses the 'ORCA skills get' command to fetch external 'version-matched guides' from a remote source at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill functions as a discovery stub that ingests external content into the session. 1. Ingestion points: Command output from 'ORCA skills get' in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Execution of local binaries and shell commands. 4. Sanitization: Absent.
Recommendations
- AI detected serious security threats
Audit Metadata