skills/plastic-labs/honcho/verify/Gen Agent Trust Hub

verify

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user to run local project code and infrastructure using docker compose, uv run, and fastapi. These are standard commands for local application development, process management, and verification.
  • [EXTERNAL_DOWNLOADS]: Mentions bun install for setting up the TypeScript SDK environment. This is a standard method for installing project dependencies from an official package registry.
  • [CREDENTIALS_UNSAFE]: Provides guidance on using environment variables and .env files to provide necessary API keys (e.g., LLM_ANTHROPIC_API_KEY) for LLM providers during local testing. No secrets are hardcoded in the skill itself, and the instructions follow standard secret management practices for local development.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 04:06 PM
Security Audit — agent-trust-hub — verify