hono
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate educational content for the Hono web framework. All code examples demonstrate standard usage of the library, including routing, middleware, and request validation.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates handling untrusted user input from URL parameters and request bodies (e.g.,
c.req.param("id")). However, it also includes examples of strict validation using the@hono/zod-validatorlibrary, which is a security best practice for mitigating injection attacks in web applications. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unauthorized package installations were detected. The libraries referenced (
hono,zod,@hono/zod-validator) are standard, well-known packages in the JavaScript/TypeScript ecosystem.
Audit Metadata