skills/honojs/skills/hono-void/Gen Agent Trust Hub

hono-void

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the official @hono/cli package from the NPM registry and references the official Hono CLI GitHub repository. These are recognized vendor resources.
  • [COMMAND_EXECUTION]: Instructs the agent to execute standard developer CLI commands such as npx hono and npx void for app routing inspection, testing, and database seeding.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a potential attack surface as it processes output from local application routes (e.g., JSON response data from npx hono request).
  • Ingestion points: Tool output from npx hono request calls (found in SKILL.md).
  • Boundary markers: None specified for isolating tool output from instructions.
  • Capability inventory: Execution of shell commands via npm and npx (found in SKILL.md).
  • Sanitization: No explicit sanitization or validation of the ingested application data is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 05:15 PM