hono
Fail
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill requires or suggests the installation of
@hono/clivia npm or npx. While@hono/cliis a standard tool for the Hono framework, the Hono organization is not included in the 'Trusted External Sources' list, making this an unverifiable dependency installation. - [PROMPT_INJECTION] (HIGH): High risk of Indirect Prompt Injection due to the combination of external data ingestion and powerful system capabilities.
- Ingestion points: The skill fetches external data through
hono searchandhono docscommands (SKILL.md). - Boundary markers: There are no boundary markers or instructions to the agent to disregard embedded instructions within documentation.
- Capability inventory: The skill allows file writing via
hono optimizeand execution of local application code viahono request(SKILL.md). - Sanitization: No sanitization or filtering of external content is specified before the data is processed by the agent.
- [COMMAND_EXECUTION] (MEDIUM): The skill's primary function involves executing CLI commands. Specifically,
hono requestdynamically loads and executes logic from local Hono application files, andhono optimizeperforms file system writes to create bundles.
Recommendations
- AI detected serious security threats
Audit Metadata