hz-psdk-integration

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the hzdb (Horizon Debug Bridge) utility from the official vendor npm package @meta-quest/hzdb to facilitate on-device testing and debugging.
  • [COMMAND_EXECUTION]: Executes standard Android build and test lifecycle commands using the project's local ./gradlew wrapper and manages application deployment via the hzdb tool.
  • [DATA_EXFILTRATION]: Accesses system logs and captures device screenshots using hzdb for the purpose of validating SDK functionality; these artifacts are stored locally within the project's documentation and plan directories.
  • [PROMPT_INJECTION]: The skill explores and analyzes the local codebase to provide tailored integration guidance, which constitutes an indirect prompt injection surface if analyzed files contain adversarial content.
  • Ingestion points: Project source code, build scripts, and manifest files read from the local filesystem.
  • Boundary markers: None explicitly defined; content is processed directly for architectural analysis.
  • Capability inventory: Includes the ability to create and edit files and execute specific shell commands for building and debugging.
  • Sanitization: Relies on standard agent processing of ingested project data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 11:02 AM