Honcho CliCAUTION
skills/plastic-labs/honcho-cli
Memory library for building stateful agents
Verdict
CAUTION
Grade
B
Trust score
89 /100
Version
—
Hosts
—
License
AGPL-3.0
Stars
7,495
01
Overview
Memory library for building stateful agents
Read from source at commit
757fc5d02ea6OBSERVED · 2026-10-0702
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
MEDIUMInventory / provenance · inv.symlink · CWE-1104
.agents/skills
.agents/skills
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
.claude/skills
.claude/skills
Why it matters. link not followed
MEDIUMInventory / provenance · skill.no_skill_md · CWE-1104
Why it matters. no SKILL.md at the audited path
Fix. a skill without its instruction file cannot be reviewed as one
Gates applied: no_behavioural_pass.
Audited 2026-10-07 · audit v0.4.1 · source sha
757fc5d02ea6full audit observations/trust-audit/skill/plastic-labs__honcho-cli.json · Report an issue / request a re-scan03
Audit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 757fc5d02ea6 | CAUTION | B | 89 | first audit |
04
Questions
What does the Honcho Cli skill do?
Memory library for building stateful agents
Is Honcho Cli safe to install?
With care. The audit graded it B (89/100) and found 3 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Honcho Cli access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (757fc5d02ea6), read on 2026-10-07. The repository is watched, and a new audit runs when it changes — this is the first audit.