honcho-integration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Honcho SDKs and referencing its documentation.
- Instructions to install
honcho-ai(Python) and@honcho-ai/sdk(Node.js). - Links to official documentation and changelogs at
honcho.devandapp.honcho.dev. - [COMMAND_EXECUTION]: The documentation includes CLI commands for setup, diagnostics, and testing.
- Commands such as
honcho init,honcho doctor, andhoncho peer chatare used for environment verification. - Framework-specific commands like
nanobot honcho enable --api-key YOUR_KEYare provided for integration. - [INDIRECT_PROMPT_INJECTION]: The skill enables an AI agent to ingest and retrieve conversation history, which creates a surface for indirect prompt injection from processed data.
- Ingestion points: Untrusted data enters the system through
add_messagescalls and history migration functions found inreferences/bot-frameworks/nanobot/session.py. - Boundary markers: The skill uses XML-formatted tags (
<prior_conversation_history>,<context>,<transcript>) to wrap migrated history, helping the model distinguish historical context from new instructions. - Capability inventory: The integration utilizes
Bash,Write, andEdittools to configure the local development environment and codebase. - Sanitization: Logic is included to sanitize identifiers using regular expressions to ensure they meet the backend service's character requirements.
Audit Metadata