spatial-emulator-usage
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages
pico-clito perform host-side operations, including emulator lifecycle management (start, stop, create, delete) and device interactions. - [EXTERNAL_DOWNLOADS]: The
pico-cli emulator installandstartcommands facilitate the download of PICO emulator bundles and images from vendor-managed sources. This is standard functionality for the tool's intended purpose. - [PRIVILEGE_ESCALATION]: The skill includes instructions for
pico-cli adb root, which elevates permissions to root on the target emulator or connected device. The skill explicitly classifies this as a sensitive/destructive operation that requires user confirmation before execution. - [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the device or emulator via commands like
logcat,emulator log, andfiles cat. This data is untrusted and could contain malicious instructions designed to influence the agent's behavior. However, the risk is characteristic of log-analysis and file-management utilities and is mitigated by the structured nature of thepico-clicommand set.
Audit Metadata