hono-architecture
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
rg(ripgrep) to search for Hono-specific patterns within the local project directory to confirm the framework's presence. - [PROMPT_INJECTION]: The skill processes project source code and possesses file-writing capabilities, representing a standard indirect prompt injection surface for development tools.
- Ingestion points: Scans and reads
package.jsonand source code files within the project directory. - Boundary markers: No explicit delimiters are used to separate analysis logic from potentially untrusted instructions in the source code.
- Capability inventory: The skill can execute localized search commands (
rg) and suggest/apply code edits to the codebase. - Sanitization: Project source code is read and processed without explicit sanitization steps for embedded agent instructions.
Audit Metadata