hz-spatial-sdk

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves its primary purpose of documenting and providing instructions for building spatial applications using the Meta Spatial SDK. No malicious patterns or security risks were detected across the analyzed files.
  • [COMMAND_EXECUTION]: The skill utilizes specialized CLI tools (metavr, hzdb) and ADB commands for application deployment, log monitoring, and performance profiling on Meta Quest devices. These are standard development operations for the target platform.
  • [EXTERNAL_DOWNLOADS]: The skill references standard Android/Kotlin dependencies hosted on official package registries (Maven/Google) and the metavr CLI tool available via NPM, which are appropriate for the documented development tasks.
  • [REMOTE_CODE_EXECUTION]: While the documentation mentions the use of npx -y metavr for tool execution, this targets a vendor-owned CLI utility within the expected developer workflow for Meta Horizon OS.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:29 PM
Security Audit — agent-trust-hub — hz-spatial-sdk