hono-typescript
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive development guide for Hono and TypeScript applications. The code snippets provided are standard boilerplate and follow industry best practices for security and performance.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to generate code that handles external data (HTTP requests). It addresses this risk surface by explicitly requiring the use of Zod for runtime validation and schema enforcement, which significantly reduces the likelihood of processing malicious payloads.
- [CREDENTIALS_UNSAFE]: The code snippets include placeholders for credentials, such as 'your-secret' in a JWT middleware example. These are clearly intended as documentation placeholders and are supplemented by instructions to use environment variables for sensitive bindings.
Audit Metadata