hono

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Hono CLI (hono) to execute tasks such as search, docs, request, and optimize. These are standard development operations intended to facilitate building and testing Hono web applications.
  • [EXTERNAL_DOWNLOADS]: The instructions suggest using or installing @hono/cli from the npm registry via npx or npm install. This is the official CLI package for the well-known Hono web framework.
  • [INDIRECT_PROMPT_INJECTION]: The hono search and hono docs commands ingest external content from Hono documentation into the agent's context. While this constitutes an attack surface for indirect prompt injection, the source is the official documentation for a reputable open-source project, which significantly reduces the risk.
  • Ingestion points: hono search and hono docs results (SKILL.md).
  • Boundary markers: None explicitly specified for documentation output.
  • Capability inventory: File system access for hono request and hono optimize; network access for hono search and hono docs (SKILL.md).
  • Sanitization: Standard terminal output handling by the Hono CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 06:59 PM