Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add meta-quest/agentic-tools --skill hz-quest-verify-firstgit clone --depth 1 https://github.com/meta-quest/agentic-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/meta-quest/agentic-tools/hz-quest-verify-first)<a href="https://agentmods.dev/skills/meta-quest/agentic-tools/hz-quest-verify-first"><img src="https://agentmods.dev/badge/skills/meta-quest/agentic-tools/hz-quest-verify-first/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/meta-quest/agentic-tools/hz-quest-verify-first"><img src="https://agentmods.dev/badge/skills/meta-quest/agentic-tools/hz-quest-verify-first.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 33 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 281 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 282 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 285 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Excessive Agency · line 253 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00186 | $0.03864 |
| Opus 5.5 | $0.00074 | $0.01546 |
| Sonnet 5.5 | $0.00037 | $0.00773 |
| Haiku 4.5 | $0.00019 | $0.00386 |
Grade A, and why
hz-quest-verify-first scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 331 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Verify First — Meta Quest Development
What you need to know before reading the rest of this
You are about to be told to call tools you may not recognize by name. Read this section first so the rest makes sense.
- Meta Quest is Meta's line of standalone VR / mixed-reality headsets (Quest 2, Quest 3, Quest 3S, Quest Pro). They run an Android-based OS.
- Horizon OS is the name of that operating system. It is forked from Android, ships on every Quest headset, and Meta updates it on its own cadence (separate from upstream Android). Many APIs are Horizon-OS-specific and have no analog in stock Android.
- metavr ("Meta VR CLI") is a Rust CLI tool published by Meta as a
standalone binary and as
metavron npm. Invoke viametavr <args>(ornpx -y metavr <args>with no install;npxalways pulls the latest published version). It wrapsadband Meta's developer APIs into higher-level commands for Meta VR device development: list devices, install apps, capture Perfetto traces, search Meta VR documentation, query 3D asset libraries, automate UI interactions, etc. metavr is the primary action layer for Meta VR dev work — the equivalent of whatgcloudis for GCP orgitis for source control. - metavr MCP server is a built-in mode of metavr that exposes a focused set of
tools to AI coding agents over the Model Context Protocol. The relevant
tools for this skill are:
vr_docs_search— search the official Meta developer documentationvr_docs_get_page— fetch the full text of a specific docs pagedevice— query and control connected Meta VR Glasses and Meta Quest headsets (list, info, connect, reboot, battery, controllers, proximity, etc.)app— query and manage installed apps (list, info, install, uninstall, launch, stop, clear)files— file ops on a connected Meta VR device (ls, push, pull, rm, mkdir)run— catch-all for any metavr subcommand without a dedicated tool (perf, ovrmetrics, ui, audio, casting, window, unity, sideload, asset, config, …). Its JSON Schema is generated from clap so the available subcommands and their typed args are visible to you in the tool definition.cli_help— discover metavr subcommands and flags as markdown
- Meta SDKs you may not recognize that are commonly used in Quest projects: Meta XR All-in-One SDK (Unity), Meta XR Core / Interaction / Platform / Voice / Movement SDKs, Meta Spatial SDK (Kotlin / Android panels), IWSDK (Immersive Web SDK for WebXR), MRUK (Mixed Reality Utility Kit), Presence Platform, Horizon Platform SDK. These ship on their own release cadences, separate from Quest OS. Meta Spatial SDK is the immersive Android/Kotlin path; it is not required for ordinary 2D Android panel apps.
- OVR vs Meta XR — older Quest Unity content and most of the public web
references the
OVRnamespace and the "Oculus Integration" Unity package. Both have been deprecated in favor of the Meta XR All-in-One SDK family. Most training data still recommends the deprecated names. Verify before recommending anything in this area.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +36 lines · +22 tokens per session be0366d578fc
- 1mo ago First seen · 295 lines · 164 tokens per session scan A 4cc606987a70
hz-quest-verify-first is a skill published in the GitHub repository meta-quest/agentic-tools (239 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 186 tokens to every session and 3,864 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
android-phone-control
Control an Android phone from a local Termux/Linux host using a deterministic ADB toolkit: device checks, wake/unlock/session mode, screenshots, UI dumps, taps, text input, key events, app launch, and safe app smoke tests.
ambient-weather-automation
Automate Ambient Weather tasks via Rube MCP (Composio). Always search tools first for current schemas.
cardputer-buddy
Iterate on the Cardputer-Adv MicroPython app bundle (Claude Buddy, Snake, Hello) after the device is already provisioned via m5-onboard. Use when the user wants to add a new app, push a single changed .py without re-flashing, watch device serial logs, or run a one-shot REPL command. Trigger on "add an app", "push to…
developer-device-platform-basics
Provides guidance and instructions on managing remote devices on Developer Device Platform (DDP). Use when reserving remote Android devices, establishing connection tunnels, checking session status, or extending/cancelling leases. Don't use for iOS or local device/hardware inquiries.
gke-ai-troubleshooting-tpu-vbar-oom
Diagnoses and prevents vbarcontrolagent segfaults, out-of-memory (OOM) errors, and TPU device initialization failures on TPU v6e nodes in GKE caused by race conditions during TPU device resets or high-frequency metrics polling. Use when troubleshooting vbarcontrolagent crashes, memory cgroup OOMs in serial console…
obsidian-bases
Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of notes, or when the user mentions Bases, table views, card views, filters, or formulas in Obsidian.