Skip to main content

honcho

Configures Honcho memory for cross-session user modeling and peer isolation in Hermes, enhancing AI interactions.

Install this skill

or
86/100

Security score

The honcho skill was audited on May 31, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 340

Access to hidden dotfiles in home directory

SourceSKILL.md
340Config file: `$HERMES_HOME/honcho.json` (profile-local) or `~/.honcho/config.json` (global).
medium line 392

Access to hidden dotfiles in home directory

SourceSKILL.md
392Run `hermes honcho setup`. Ensure `memory.provider: honcho` is in `~/.hermes/config.yaml`.
low line 36

External URL reference

SourceSKILL.md
36# select "cloud", paste API key from https://app.honcho.dev
low line 43

External URL reference

SourceSKILL.md
43# select "local", enter base URL (e.g. http://localhost:8000)
low line 113

External URL reference

SourceSKILL.md
113Settings changed in the [Honcho dashboard](https://app.honcho.dev) are synced back on session init -- server-side config wins over local defaults.
low line 346

External URL reference

SourceSKILL.md
346| `apiKey` | -- | API key ([get one](https://app.honcho.dev)) |
Scanned on May 31, 2026
View Security Dashboard
Installation guide →