hono-api

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a production-ready architectural pattern for Hono APIs on Cloudflare Workers, emphasizing security best practices throughout its instructions.\n- [SAFE]: Proactively includes specific SSRF (Server-Side Request Forgery) prevention logic to be implemented in the generated code, which effectively blocks access to private network ranges and cloud metadata services.\n- [SAFE]: Enforces safe CORS (Cross-Origin Resource Sharing) configurations by explicitly instructing the agent to use an allowlist for origins rather than wildcards.\n- [SAFE]: Employs standard industry tools and libraries from the Cloudflare and Hono ecosystems (such as Wrangler, Drizzle ORM, and Vitest) without any suspicious remote code downloads or execution patterns.\n- [SAFE]: Includes guidance on secure environment variable management, recommending the use of encrypted secrets via standard platform tooling rather than hardcoding credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 03:46 AM
Security Audit — agent-trust-hub — hono-api