nodejs-hono
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code samples for building Node.js/Edge applications. All patterns analyzed conform to standard development practices without malicious intent.
- [EXTERNAL_DOWNLOADS]: The skill references standard project initialization commands using
npm,bun, anddenowhich fetch thecreate-honoscaffolding tool. These are recognized developer utilities from trusted registries. - [CREDENTIALS_UNSAFE]: Security-sensitive values like
JWT_SECRET,API_TOKEN, andDATABASE_URLare correctly handled using environment variable placeholders in both code and configuration examples. - [INDIRECT_PROMPT_INJECTION]: The skill identifies the risk of untrusted data ingestion in web applications and explicitly mandates the use of
zValidatormiddleware to ensure all inputs are sanitized and validated against schemas.
Audit Metadata