Compétences orca-emulator
📦

orca-emulator

Révision du contenu r1 Risque élevé ⚙️ Commandes externes

Control iOS Simulators Through Orca

iOS testing often requires switching between agent tools, simulator controls, and evidence collection. This skill routes simulator interaction through Orca and loads guidance matched to the active CLI.

Prend en charge: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 Médiocre

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent
Review the Skillstore skill "orca-emulator" from https://skillstore.io/skills/stablyai-orca-emulator.md and its manifest at https://skillstore.io/api/skills/stablyai-orca-emulator/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/stablyai-orca-emulator.md manifest signé GET /api/skills/stablyai-orca-emulator/manifest lockfile signé GET /api/skills/stablyai-orca-emulator/lockfile

Tester

Utilisation de « orca-emulator ». Inspect the current simulator screen and identify the primary action.

RĂ©sultat attendu:

The simulator shows the sign-in screen. The primary accessible action is Sign In, below the email and password fields.

Utilisation de « orca-emulator ». Rotate the simulator and verify the checkout screen.

RĂ©sultat attendu:

The checkout screen remained visible in landscape orientation. The order summary and Place Order control were accessible without overlap.

Utilisation de « orca-emulator ». Reproduce the failed profile update and collect evidence.

RĂ©sultat attendu:

  • Opened Profile and changed the display name.
  • Tapped Save and observed an error banner.
  • The original name remained after reopening the screen.

Audit de sécurité

Risque élevé
v1 • 26/09/2026 Ouvrir le rapport versionné

Most alerts are false positives caused by Markdown inline code and prose references to shells. Confirmed risks include environment-controlled command selection and retrying an Orca command with elevated permissions. The stub also delegates instructions to an unaudited guide, which weakens marketplace review coverage.

1
Fichiers analysés
51
Lignes analysées
3
Éléments à examiner
0
Faux positifs ignorés

Préoccupations de sécurité confirmées (2)

Élevé
SKILL.md:15SKILL.md:39-43
Unaudited Dynamic Instruction Loading
The package is a stub that directs the agent to load a version-matched guide from an executable. That guide is outside this audit.
The file explicitly calls itself a discovery stub and requires loading another guide before commands. The retrieved instructions are absent from the audited package.
Élevé
SKILL.md:47-48
Unscoped Privilege Escalation Directive
The skill tells the agent to rerun a denied command with elevated permissions. It does not require user approval or define the required scope.
The escalation instruction is explicit and unconditional after a named error. No approval checkpoint or least-privilege boundary is provided.
Éléments d’évaluation des capacités (3)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Élevé
SKILL.md:24
Ruby/shell backtick execution
- If the `ORCA_CLI_COMMAND` environment variable is set, use its value. Orca exports this
Although the backticks are Markdown, line 24 directs the agent to execute an environment-controlled value. A modified environment can select an unintended command.
Élevé
SKILL.md:48-49
Ruby/shell backtick execution
re-run it with escalated permissions, and do not run `ORCA open` or restart Orca. If
Line 48 instructs the agent to rerun a command with elevated permissions without requiring user approval or limiting the permission scope.
Moyen
SKILL.md:46-47
Ruby/shell backtick execution
not cover. If a command reports that Orca is not running, start it with `ORCA open --json`
Line 46 directs the agent to run the selected executable. If selection came from ORCA_CLI_COMMAND, this can invoke an environment-controlled command.

Facteurs de risque

⚙️ Commandes externes (18)
SKILL.md:17 SKILL.md:24 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:32 SKILL.md:33 SKILL.md:41-43 SKILL.md:43-45 SKILL.md:45 SKILL.md:46-47 SKILL.md:47-48 SKILL.md:48-49 SKILL.md:49 SKILL.md:34 SKILL.md:34
Audité par: codex
Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné
Évaluation de sécurité

Copier le lien du rapport

https://skillstore.io/skills/stablyai-orca-emulator/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/stablyai-orca-emulator/security.svg)](https://skillstore.io/skills/stablyai-orca-emulator?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/stablyai-orca-emulator?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/stablyai-orca-emulator/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/stablyai-orca-emulator.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citations académiques (APA · BibTeX · CFF)

Citation APA

stablyai. (2026). orca-emulator security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/stablyai-orca-emulator/audits/1

Citation BibTeX

@techreport{stablyai-stablyai-orca-emulator-2026, author = {stablyai}, title = {orca-emulator security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/stablyai-orca-emulator/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "orca-emulator security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "stablyai" date-released: "2026-09-26" url: "https://skillstore.io/skills/stablyai-orca-emulator/audits/1" identifiers: - type: other value: "skillstore:stablyai-orca-emulator:audit:1" description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen
55
Architecture
85
Maintenabilité
87
Contenu
65
Communauté
91
Conformité aux spécifications

Ce que vous pouvez créer

Verify an iOS Change

Drive the changed interface and collect simulator evidence for a review.

Repeat Interface Checks

Perform consistent taps, typing, gestures, and rotation during exploratory testing.

Inspect Accessible Interfaces

Review the simulator accessibility tree while investigating labels, controls, and navigation.

Essayez ces prompts

Open and Inspect 
Use Orca to inspect the booted iOS Simulator. Report the visible screen and available accessibility elements before taking action.
Complete a Basic Flow 
Use Orca to open [app], tap [control], enter [text], and report the final visible state.
Verify a UI Change 
Test [feature] in the booted simulator. Exercise [steps], inspect accessibility labels, and collect evidence for the expected result.
Investigate a Stateful Failure 
Reproduce [failure] through Orca across [orientations or states]. Record each action, observed result, accessibility evidence, and the earliest divergence.

Bonnes pratiques

  • Resolve the Orca executable once and use the same executable throughout the session.
  • Inspect the current screen and accessibility tree before issuing interactions.
  • Record expected and observed states when collecting simulator evidence.

Éviter

  • Do not use this skill for Android devices or emulators.
  • Do not guess unsupported Orca commands when help output is available.
  • Do not change executables after a failure because another build may target different session state.

Foire aux questions

What platform does this skill support?
It supports a booted Apple iOS Simulator on macOS through Orca.
Can it build and install my application?
No. Build and install the application with Xcode tooling or simctl before using this skill.
Does it support Android emulators?
No. Use the separate Android emulator skill for Android devices and emulators.
What interactions can it guide?
It covers taps, gestures, typing, hardware buttons, rotation, accessibility inspection, and evidence collection.
Why does it load another guide?
It requests guidance matched to the active Orca executable and session version.
What should happen when the selected executable fails?
Report the exact error and stop. Do not switch to another Orca executable.

Détails du développeur

Auteur

stablyai

Licence

Apache-2.0

RĂ©vision Skillstore

r1

Avis de version

L’auteur n’a déclaré aucune version.

DĂ©pĂ´t

https://github.com/stablyai/orca/tree/da6d483ab9aae8aa81eaf773bcf0fda9fc4e3495/skills/orca-emulator

RĂ©f

1cda4003aa9ea65a9606af00b33e9c706ef03e62

RĂ©cence de maintenance

30/09/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

đź“„ SKILL.md