hono

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is largely a benign Hono framework reference and its main `npx hono request` usage aligns with official tooling, but the added recommendation to use unverified `workers-fetch` introduces disproportionate supply-chain risk inconsistent with otherwise official guidance. No confirmed malware or credential theft behavior is present.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Sep 23, 2026, 06:54 PM
Package URL
pkg:socket/skills-sh/fellipeutaka%2Fleon%2Fhono%2F@a6ab2b0d5e314c89f56452e55b573ef5d591a430a13f27029e2c1d8627f22018