hz-vr-debug
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes application logs and files from an external device, creating a potential surface for indirect prompt injection if the device data contains malicious instructions.\n
- Ingestion points: Log streaming via
metavr adb logcatand file retrieval viametavr files pull.\n - Boundary markers: The instructions do not specify delimiters to separate device-generated content from agent instructions.\n
- Capability inventory: Shell command execution (
metavr,hzdb,npx) and local file system access.\n - Sanitization: There are no explicit sanitization steps for device logs or file contents described.\n- [EXTERNAL_DOWNLOADS]: The skill downloads the vendor-provided
@meta-quest/metavrpackage from the npm registry usingnpx.\n - Evidence: Documentation examples show
npx -y metavrfor invoking the tool without a global install.\n- [COMMAND_EXECUTION]: The skill utilizes several CLI tools to interact with Meta Quest devices for debugging purposes.\n - Evidence: Usage of
metavrfor device management, log monitoring, and file manipulation.\n- [DYNAMIC_EXECUTION]: The skill relies onnpxto fetch and run executable code at runtime.\n - Evidence: Execution of the
metavrpackage is handled dynamically throughnpx -y.
Audit Metadata