스킬 orca-emulator

📦

orca-emulator

Name: orca-emulator
Author: stablyai

콘텐츠 리비전 r1 높은 위험 ⚙️ 외부 명령어

Control iOS Simulators Through Orca

iOS testing often requires switching between agent tools, simulator controls, and evidence collection. This skill routes simulator interaction through Orca and loads guidance matched to the active CLI.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "orca-emulator" from https://skillstore.io/skills/stablyai-orca-emulator.md and its manifest at https://skillstore.io/api/skills/stablyai-orca-emulator/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/stablyai-orca-emulator.md 서명된 manifest GET /api/skills/stablyai-orca-emulator/manifest 서명된 lockfile GET /api/skills/stablyai-orca-emulator/lockfile

테스트해 보기

"orca-emulator" 사용 중입니다. Inspect the current simulator screen and identify the primary action.

예상 결과:

The simulator shows the sign-in screen. The primary accessible action is Sign In, below the email and password fields.

"orca-emulator" 사용 중입니다. Rotate the simulator and verify the checkout screen.

예상 결과:

The checkout screen remained visible in landscape orientation. The order summary and Place Order control were accessible without overlap.

"orca-emulator" 사용 중입니다. Reproduce the failed profile update and collect evidence.

예상 결과:

Opened Profile and changed the display name.
Tapped Save and observed an error banner.
The original name remained after reopening the screen.

보안 감사

높은 위험

v1 • 2026. 9. 26. 버전별 보고서 열기

Most alerts are false positives caused by Markdown inline code and prose references to shells. Confirmed risks include environment-controlled command selection and retrying an Orca command with elevated permissions. The stub also delegates instructions to an unaudited guide, which weakens marketplace review coverage.

스캔된 파일

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (2)

높음

SKILL.md:15 SKILL.md:39-43

Unaudited Dynamic Instruction Loading

The package is a stub that directs the agent to load a version-matched guide from an executable. That guide is outside this audit.

The file explicitly calls itself a discovery stub and requires loading another guide before commands. The retrieved instructions are absent from the audited package.

높음

SKILL.md:47-48

Unscoped Privilege Escalation Directive

The skill tells the agent to rerun a denied command with elevated permissions. It does not require user approval or define the required scope.

The escalation instruction is explicit and unconditional after a named error. No approval checkpoint or least-privilege boundary is provided.

기능 검토 항목 (3)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음

SKILL.md:24

Ruby/shell backtick execution

- If the `ORCA_CLI_COMMAND` environment variable is set, use its value. Orca exports this

Although the backticks are Markdown, line 24 directs the agent to execute an environment-controlled value. A modified environment can select an unintended command.

높음

SKILL.md:48-49

Ruby/shell backtick execution

re-run it with escalated permissions, and do not run `ORCA open` or restart Orca. If

Line 48 instructs the agent to rerun a command with elevated permissions without requiring user approval or limiting the permission scope.

중간

SKILL.md:46-47

Ruby/shell backtick execution

not cover. If a command reports that Orca is not running, start it with `ORCA open --json`

Line 46 directs the agent to run the selected executable. If selection came from ORCA_CLI_COMMAND, this can invoke an environment-controlled command.

위험 요인

⚙️ 외부 명령어 (18)

SKILL.md:17 SKILL.md:24 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:32 SKILL.md:33 SKILL.md:41-43 SKILL.md:43-45 SKILL.md:45 SKILL.md:46-47 SKILL.md:47-48 SKILL.md:48-49 SKILL.md:49 SKILL.md:34 SKILL.md:34

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/stablyai-orca-emulator/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/stablyai-orca-emulator/security.svg)](https://skillstore.io/skills/stablyai-orca-emulator?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/stablyai-orca-emulator?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/stablyai-orca-emulator/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/stablyai-orca-emulator.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

stablyai. (2026). orca-emulator security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/stablyai-orca-emulator/audits/1

BibTeX 인용

@techreport{stablyai-stablyai-orca-emulator-2026,
  author = {stablyai},
  title = {orca-emulator security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/stablyai-orca-emulator/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "orca-emulator security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "stablyai"
date-released: "2026-09-26"
url: "https://skillstore.io/skills/stablyai-orca-emulator/audits/1"
identifiers:
  - type: other
    value: "skillstore:stablyai-orca-emulator:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Verify an iOS Change

Drive the changed interface and collect simulator evidence for a review.

Repeat Interface Checks

Perform consistent taps, typing, gestures, and rotation during exploratory testing.

Inspect Accessible Interfaces

Review the simulator accessibility tree while investigating labels, controls, and navigation.

이 프롬프트를 사용해 보세요

Open and Inspect

Use Orca to inspect the booted iOS Simulator. Report the visible screen and available accessibility elements before taking action.

Complete a Basic Flow

Use Orca to open [app], tap [control], enter [text], and report the final visible state.

Verify a UI Change

Test [feature] in the booted simulator. Exercise [steps], inspect accessibility labels, and collect evidence for the expected result.

Investigate a Stateful Failure

Reproduce [failure] through Orca across [orientations or states]. Record each action, observed result, accessibility evidence, and the earliest divergence.

모범 사례

Resolve the Orca executable once and use the same executable throughout the session.
Inspect the current screen and accessibility tree before issuing interactions.
Record expected and observed states when collecting simulator evidence.

피하기

Do not use this skill for Android devices or emulators.
Do not guess unsupported Orca commands when help output is available.
Do not change executables after a failure because another build may target different session state.

자주 묻는 질문

What platform does this skill support?

It supports a booted Apple iOS Simulator on macOS through Orca.

Can it build and install my application?

No. Build and install the application with Xcode tooling or simctl before using this skill.

Does it support Android emulators?

No. Use the separate Android emulator skill for Android devices and emulators.

What interactions can it guide?

It covers taps, gestures, typing, hardware buttons, rotation, accessibility inspection, and evidence collection.

Why does it load another guide?

It requests guidance matched to the active Orca executable and session version.

What should happen when the selected executable fails?

Report the exact error and stop. Do not switch to another Orca executable.

개발자 세부 정보

작성자

stablyai

라이선스

Apache-2.0

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/stablyai/orca/tree/da6d483ab9aae8aa81eaf773bcf0fda9fc4e3495/skills/orca-emulator

참조

1cda4003aa9ea65a9606af00b33e9c706ef03e62

유지보수 최신성

2026. 9. 30.

사용량

0 다운로드 · 0 조회

파일 구조

📄 SKILL.md