hono
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of informational markdown files and code samples documenting the Hono web framework.
- [COMMAND_EXECUTION]: The
scripts/directory provides a reference for standard development, build, and deployment commands (e.g.,npm install,vite build,wrangler deploy,gcloud run deploy). These are documented for the user's information and are not executed automatically by the skill. - [CREDENTIALS_UNSAFE]: Several code samples in the
samples/andreferences/middleware/directories contain placeholder credentials, such asusername: 'hono',password: 'acoolproject', andsecret: 'it-is-very-secret'. These are used for illustrative purposes and do not constitute a leak of sensitive information. - [EXTERNAL_DOWNLOADS]: The documentation references standard package installations from official registries (npm, JSR) and deployment tools from well-known technology providers (AWS, Cloudflare, Google Cloud, Vercel, Netlify). These are legitimate resources consistent with the skill's purpose as a developer reference.
Audit Metadata