The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The check-hono-facts.py script performs network requests to the official npm registry (registry.npmjs.org) to verify the currency of the documented Hono ecosystem packages. These operations target a well-known service and are used for maintenance purposes.
[COMMAND_EXECUTION]: The skill utilizes local Python scripts (route-inventory.py and check-hono-facts.py) to perform static analysis on the application's source code and to check for version drift in dependencies. These scripts are run locally and do not interact with untrusted external code.
[INDIRECT_PROMPT_INJECTION]: The skill documents common data ingestion points such as c.req.json(), c.req.query(), and c.req.param(). It addresses potential injection risks by mandating the use of schema validation middleware (e.g., @hono/zod-validator) and providing explicit warnings against using unsanitized HTML rendering functions like raw() in JSX.
[SAFE]: No malicious patterns such as obfuscation, credential exfiltration, or unauthorized privilege escalation were detected. The skill promotes security-first development practices including response hardening middleware and environment-specific gates for secrets.

hono-ops