hono-core
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the Hono framework and related adapters using standard package managers (e.g.,
npm install hono). These references target widely recognized and official software packages. - [INDIRECT_PROMPT_INJECTION]: The skill defines various methods for ingesting untrusted external data, which establishes the primary attack surface for any application developed using these patterns.
- Ingestion points: Path parameters, query strings, request headers, JSON bodies, and form data are accessed via the context object
c.reqinSKILL.md. - Boundary markers: None are explicitly defined within the core routing documentation; the skill references a separate
hono-validationmodule for handling data constraints. - Capability inventory: Applications built with Hono typically possess capabilities for network operations (
fetch), environment variable access (c.env), and diverse response generation. - Sanitization: The skill documents raw input access; sanitization and validation are delegated to middleware or external libraries like Zod, which are mentioned as related skills.
Audit Metadata