orca-emulator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using a locally resolved 'orca' binary (e.g.,
orca-dev,orca-ide, ororca). This is the primary mechanism for controlling the emulator. - [DYNAMIC_EXECUTION]: The skill directs the agent to fetch its full instructions at runtime using the command
ORCA skills get orca-emulator. This pattern ensures that the agent receives instructions perfectly matched to the installed version of the tool, though it means the final execution logic is determined at runtime by the binary. - [INDIRECT_PROMPT_INJECTION]: The skill processes JSON output from CLI commands such as
ORCA status --jsonandORCA emulator list --json. This represents a data ingestion surface where the agent interprets external data to make decisions, which is standard for CLI-integrating skills.
Audit Metadata