orca-emulator-android
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch and follow instructions from the output of the
ORCA skills getcommand. This creates a surface where instructions loaded at runtime could influence agent behavior beyond the static skill definition. - Ingestion points: The output of
ORCA skills get orca-emulator-androidis processed as instructions by the agent. - Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are provided in the stub.
- Capability inventory: The skill description indicates capabilities for
adbcontrol, application installation, logcat access, and hardware interaction. - Sanitization: No sanitization or validation of the fetched instructions is mentioned.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands and local binaries (such as
orca,orca-ide, ororca-dev) to function and fetch its core logic. - [DYNAMIC_EXECUTION]: The skill logic is not statically defined within the skill files; it is dynamically loaded at runtime from a version-matched source via the CLI. The path to the executable used is determined dynamically based on environment variables like
ORCA_CLI_COMMANDandORCA_DEV_REPO_ROOT.
Audit Metadata