hono
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Hono CLI (
hono) to execute tasks such assearch,docs,request, andoptimize. These are standard development operations intended to facilitate building and testing Hono web applications. - [EXTERNAL_DOWNLOADS]: The instructions suggest using or installing
@hono/clifrom the npm registry vianpxornpm install. This is the official CLI package for the well-known Hono web framework. - [INDIRECT_PROMPT_INJECTION]: The
hono searchandhono docscommands ingest external content from Hono documentation into the agent's context. While this constitutes an attack surface for indirect prompt injection, the source is the official documentation for a reputable open-source project, which significantly reduces the risk. - Ingestion points:
hono searchandhono docsresults (SKILL.md). - Boundary markers: None explicitly specified for documentation output.
- Capability inventory: File system access for
hono requestandhono optimize; network access forhono searchandhono docs(SKILL.md). - Sanitization: Standard terminal output handling by the Hono CLI.
Audit Metadata