honcho
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval and injection of past conversation data and user-modeled conclusions into the agent's prompt context, creating a surface for indirect prompt injection.
- Ingestion points: Data enters the agent's context through tools like
honcho_search,honcho_context, andhoncho_reasoning, as well as automated background injections inhybridandcontextmodes. - Boundary markers: The system is documented to escape delimiter sequences and normalize whitespace to maintain prompt integrity.
- Capability inventory: The skill provides capabilities for semantic search, natural language reasoning over stored data, and persistent storage of new conclusions.
- Sanitization: The implementation includes stripping XML/HTML tags from user-provided content and truncating long conclusions to prevent context corruption.
- [EXTERNAL_DOWNLOADS]: The skill installs the
honcho-aiPython package and connects to thehoncho.devAPI endpoints for its memory operations. These resources are official vendor-provided components for the Hermes platform.
Audit Metadata