hono
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a technical reference for building applications with Hono. All code samples and instructions align with standard development practices for this framework.
- [COMMAND_EXECUTION]: The documentation describes the use of
npx hono requestandnpx workers-fetchfor local testing of application endpoints. These are legitimate developer tools used within their intended scope. - [CREDENTIALS_SAFE]: The skill explicitly warns against passing sensitive credentials in command-line arguments and recommends using environment variables, demonstrating an awareness of security best practices.
- [PROMPT_INJECTION]: As a web development skill, it documents the ingestion and processing of untrusted request data (parameters, headers, and bodies).
- Ingestion points: Request data is handled via the
c.reqobject as documented inSKILL.md. - Boundary markers: While no specific LLM context delimiters are used, the skill focuses on code-level validation strategies.
- Capability inventory: The agent can write application code and execute standard CLI tools (
npx). - Sanitization: The instructions prominently feature the use of Zod and Standard Schema validators for robust input sanitization.
Audit Metadata