metavr-cli

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx -y metavr to execute its primary CLI tool. This pattern ensures the agent uses the latest version of the tool from the official npm registry, which is a standard distribution method for Node.js-based developer utilities.
  • [COMMAND_EXECUTION]: The skill provides tools for interacting with connected Meta Quest headsets, including metavr adb shell and metavr shell. These commands allow for direct interaction with the Android-based operating system on the device, which is essential for tasks like checking process states or file system navigation during development.
  • [SAFE]: The skill includes proactive safety guidance in references/metavr-agent-workflows.md, explicitly instructing AI agents to treat fetched documentation and tool outputs as untrusted data. It also recommends requiring human approval for destructive actions such as uninstalling apps or deleting files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:18 PM
Security Audit — agent-trust-hub — metavr-cli