hono
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is largely a benign Hono framework reference and its main `npx hono request` usage aligns with official tooling, but the added recommendation to use unverified `workers-fetch` introduces disproportionate supply-chain risk inconsistent with otherwise official guidance. No confirmed malware or credential theft behavior is present.
Confidence: 87%Severity: 72%
Audit Metadata