honcho-integration

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Honcho SDKs and referencing its documentation.
  • Instructions to install honcho-ai (Python) and @honcho-ai/sdk (Node.js).
  • Links to official documentation and changelogs at honcho.dev and app.honcho.dev.
  • [COMMAND_EXECUTION]: The documentation includes CLI commands for setup, diagnostics, and testing.
  • Commands such as honcho init, honcho doctor, and honcho peer chat are used for environment verification.
  • Framework-specific commands like nanobot honcho enable --api-key YOUR_KEY are provided for integration.
  • [INDIRECT_PROMPT_INJECTION]: The skill enables an AI agent to ingest and retrieve conversation history, which creates a surface for indirect prompt injection from processed data.
  • Ingestion points: Untrusted data enters the system through add_messages calls and history migration functions found in references/bot-frameworks/nanobot/session.py.
  • Boundary markers: The skill uses XML-formatted tags (<prior_conversation_history>, <context>, <transcript>) to wrap migrated history, helping the model distinguish historical context from new instructions.
  • Capability inventory: The integration utilizes Bash, Write, and Edit tools to configure the local development environment and codebase.
  • Sanitization: Logic is included to sanitize identifiers using regular expressions to ensure they meet the backend service's character requirements.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:36 AM