hono
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches documentation files and indices from
hono.dev. These are official resources for the Hono framework and are treated as safe sources for development information.\n- [COMMAND_EXECUTION]: Executes shell commands vianpmandnpxto manage the@hono/clitool and perform application testing (routes, request, batch). These actions are within the scope of the skill's intended purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests external documentation which could theoretically contain instructions intended to influence agent behavior.\n - Ingestion points:
https://hono.dev/llms.txtandhttps://hono.dev/docs/*(referenced in SKILL.md).\n - Boundary markers: The skill does not explicitly define delimiters or warnings to ignore instructions found within the fetched external data.\n
- Capability inventory: The skill allows package installation and execution of CLI commands that can interact with the local development environment.\n
- Sanitization: No sanitization is performed on the content retrieved from the documentation URLs.
Audit Metadata