hono-api
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a production-ready architectural pattern for Hono APIs on Cloudflare Workers, emphasizing security best practices throughout its instructions.\n- [SAFE]: Proactively includes specific SSRF (Server-Side Request Forgery) prevention logic to be implemented in the generated code, which effectively blocks access to private network ranges and cloud metadata services.\n- [SAFE]: Enforces safe CORS (Cross-Origin Resource Sharing) configurations by explicitly instructing the agent to use an allowlist for origins rather than wildcards.\n- [SAFE]: Employs standard industry tools and libraries from the Cloudflare and Hono ecosystems (such as Wrangler, Drizzle ORM, and Vitest) without any suspicious remote code downloads or execution patterns.\n- [SAFE]: Includes guidance on secure environment variable management, recommending the use of encrypted secrets via standard platform tooling rather than hardcoding credentials.
Audit Metadata