hono

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill serves as a technical reference for building applications with Hono. All code samples and instructions align with standard development practices for this framework.
  • [COMMAND_EXECUTION]: The documentation describes the use of npx hono request and npx workers-fetch for local testing of application endpoints. These are legitimate developer tools used within their intended scope.
  • [CREDENTIALS_SAFE]: The skill explicitly warns against passing sensitive credentials in command-line arguments and recommends using environment variables, demonstrating an awareness of security best practices.
  • [PROMPT_INJECTION]: As a web development skill, it documents the ingestion and processing of untrusted request data (parameters, headers, and bodies).
  • Ingestion points: Request data is handled via the c.req object as documented in SKILL.md.
  • Boundary markers: While no specific LLM context delimiters are used, the skill focuses on code-level validation strategies.
  • Capability inventory: The agent can write application code and execute standard CLI tools (npx).
  • Sanitization: The instructions prominently feature the use of Zod and Standard Schema validators for robust input sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 04:20 PM