Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add meta-quest/agentic-tools --skill metavr-cligit clone --depth 1 https://github.com/meta-quest/agentic-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/meta-quest/agentic-tools/metavr-cli)<a href="https://agentmods.dev/skills/meta-quest/agentic-tools/metavr-cli"><img src="https://agentmods.dev/badge/skills/meta-quest/agentic-tools/metavr-cli/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/meta-quest/agentic-tools/metavr-cli"><img src="https://agentmods.dev/badge/skills/meta-quest/agentic-tools/metavr-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 27 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 37 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 38 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 44 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 53 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 179 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00108 | $0.01724 |
| Opus 5.5 | $0.00043 | $0.00690 |
| Sonnet 5.5 | $0.00022 | $0.00345 |
| Haiku 4.5 | $0.00011 | $0.00172 |
Grade C, and why
metavr-cli scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://developers.meta.com/horizon/install-cli/ | sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://developers.meta.com/horizon/install-cli/ | sh How it starts
The opening of the file, as written. The whole thing — 205 lines — stays where its author put it; the contents beside it link to each section on GitHub.
metavr CLI Reference
What metavr Does
metavr (Meta VR CLI) is a CLI for Meta VR and Horizon OS development. It wraps ADB and Meta developer APIs into higher-level commands for device management, app lifecycle, documentation lookup, screenshots, audio control, test-device preparation, MCP integration, and Perfetto performance analysis.
Keep this SKILL.md as the routing layer. For exact flags and complete command
syntax, use the generated full CLI reference in docs/metavr-cli.md or run:
metavr --markdown-help
Installation
Install the metavr CLI first.
Standalone binary
The standalone binary goes on your PATH (no prerequisites):
# macOS and Linux
curl -fsSL https://developers.meta.com/horizon/install-cli/ | sh
# Windows (PowerShell)
iwr -useb https://developers.meta.com/horizon/install-cli/windows/ | iex
The installer adds metavr to your PATH (source your shell rc or open a new
terminal to pick it up). If you installed the standalone binary, keep it
current with metavr update.
npm distribution
The npm distribution requires Node.js 16 or newer, and needs no install of its own:
npx -y metavr --version
or install it globally with npm install -g metavr (update later with
npm update -g metavr).
Examples in the rest of the documentation use the bare metavr command. If
you use the npm distribution, prefix with npx -y (e.g.
npx -y metavr device list).
Device Connection
Before using on-device commands:
- Enable Developer Mode on your Meta VR device (Settings > System > Developer)
- Enable USB Debugging when prompted
- Connect your Meta VR device to your computer via USB-C
Verify the connection:
metavr device list
If no devices appear: try a different USB cable (data-capable, not charge-only),
accept the USB debugging prompt on the headset, or connect wirelessly with
metavr device connect <ip>.
Command Discovery
Use progressive disclosure:
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +14 lines · +23 tokens per session scan A → C c2a46ad45d97
- 1mo ago First seen · 191 lines · 85 tokens per session scan A a29376be5ba8
metavr-cli is a skill published in the GitHub repository meta-quest/agentic-tools (237 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 108 tokens to every session and 1,724 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
unity-xr
Use when users want to set up XR rigs, add grab interactions, configure teleportation, continuous locomotion, XR UI, or diagnose XR scenes. Requires com.unity.xr.interaction.toolkit 3.x on Unity 6+.
android-phone-control
Control an Android phone from a local Termux/Linux host using a deterministic ADB toolkit: device checks, wake/unlock/session mode, screenshots, UI dumps, taps, text input, key events, app launch, and safe app smoke tests.
ambient-weather-automation
Automate Ambient Weather tasks via Rube MCP (Composio). Always search tools first for current schemas.
animation-motion-capture
Implement motion capture integration and real-time synchronization.
unity-xr-vr-audit
Use to audit XR/VR setup: XR settings assets, related packages, scenes, and input/action assets for headsets.
generate-minecraft-3D-build-plan
Call Craftsman Agent API OneKey Router to generate a Minecraft 3D scene build plan.