nodejs-hono

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructional content and code samples for building Node.js/Edge applications. All patterns analyzed conform to standard development practices without malicious intent.
  • [EXTERNAL_DOWNLOADS]: The skill references standard project initialization commands using npm, bun, and deno which fetch the create-hono scaffolding tool. These are recognized developer utilities from trusted registries.
  • [CREDENTIALS_UNSAFE]: Security-sensitive values like JWT_SECRET, API_TOKEN, and DATABASE_URL are correctly handled using environment variable placeholders in both code and configuration examples.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies the risk of untrusted data ingestion in web applications and explicitly mandates the use of zValidator middleware to ensure all inputs are sanitized and validated against schemas.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 10:30 PM