hz-vr-debug

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes application logs and files from an external device, creating a potential surface for indirect prompt injection if the device data contains malicious instructions.\n
  • Ingestion points: Log streaming via metavr adb logcat and file retrieval via metavr files pull.\n
  • Boundary markers: The instructions do not specify delimiters to separate device-generated content from agent instructions.\n
  • Capability inventory: Shell command execution (metavr, hzdb, npx) and local file system access.\n
  • Sanitization: There are no explicit sanitization steps for device logs or file contents described.\n- [EXTERNAL_DOWNLOADS]: The skill downloads the vendor-provided @meta-quest/metavr package from the npm registry using npx.\n
  • Evidence: Documentation examples show npx -y metavr for invoking the tool without a global install.\n- [COMMAND_EXECUTION]: The skill utilizes several CLI tools to interact with Meta Quest devices for debugging purposes.\n
  • Evidence: Usage of metavr for device management, log monitoring, and file manipulation.\n- [DYNAMIC_EXECUTION]: The skill relies on npx to fetch and run executable code at runtime.\n
  • Evidence: Execution of the metavr package is handled dynamically through npx -y.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 06:57 PM
Security Audit — agent-trust-hub — hz-vr-debug