hono
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxornpmto download and execute the@hono/clipackage. This is the official command-line interface for the well-known Hono web framework. - [INDIRECT_PROMPT_INJECTION]: Commands like
hono searchandhono docsfetch external information from the framework's documentation. While this represents a potential attack surface if the documentation source were compromised, it is a standard function for this type of tool. - [COMMAND_EXECUTION]: Uses shell access to run CLI commands for searching documentation, testing local application files, and optimizing code bundles.
Audit Metadata