hono
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the installation and use of the
@hono/clipackage via npm or npx. This is the official command-line tool for the Hono framework and is expected for the skill's functionality.\n- [COMMAND_EXECUTION]: Provides various bash commands for searching documentation, testing endpoints, and optimizing assets using thehonoCLI. These operations are aligned with the skill's purpose as a developer tool.\n- [PROMPT_INJECTION]: The skill useshono searchandhono docsto ingest external documentation into the agent's context. This represents an indirect prompt injection surface inherent to the skill's primary documentation-lookup feature.\n - Ingestion points: Output from the
hono searchandhono docscommands (SKILL.md).\n - Boundary markers: None used to isolate documentation content from instructions.\n
- Capability inventory: Includes file generation/writing (
hono optimize) and internal request simulation (hono request).\n - Sanitization: Relies on the standard output of the Hono CLI documentation utility.
Audit Metadata