spatial-emulator-usage

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill leverages pico-cli to perform host-side operations, including emulator lifecycle management (start, stop, create, delete) and device interactions.
  • [EXTERNAL_DOWNLOADS]: The pico-cli emulator install and start commands facilitate the download of PICO emulator bundles and images from vendor-managed sources. This is standard functionality for the tool's intended purpose.
  • [PRIVILEGE_ESCALATION]: The skill includes instructions for pico-cli adb root, which elevates permissions to root on the target emulator or connected device. The skill explicitly classifies this as a sensitive/destructive operation that requires user confirmation before execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the device or emulator via commands like logcat, emulator log, and files cat. This data is untrusted and could contain malicious instructions designed to influence the agent's behavior. However, the risk is characteristic of log-analysis and file-management utilities and is mitigated by the structured nature of the pico-cli command set.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 07:19 AM