hono-void
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official
@hono/clipackage from the NPM registry and references the official Hono CLI GitHub repository. These are recognized vendor resources. - [COMMAND_EXECUTION]: Instructs the agent to execute standard developer CLI commands such as
npx honoandnpx voidfor app routing inspection, testing, and database seeding. - [INDIRECT_PROMPT_INJECTION]: The skill represents a potential attack surface as it processes output from local application routes (e.g., JSON response data from
npx hono request). - Ingestion points: Tool output from
npx hono requestcalls (found in SKILL.md). - Boundary markers: None specified for isolating tool output from instructions.
- Capability inventory: Execution of shell commands via
npmandnpx(found in SKILL.md). - Sanitization: No explicit sanitization or validation of the ingested application data is mentioned.
Audit Metadata