hono
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the use of
npx --yes @stoplight/spectral-clito download and execute the Spectral linting tool. - This tool is a well-known, industry-standard utility for validating OpenAPI specifications.
- [COMMAND_EXECUTION]: Provides specific shell commands for linting generated API documentation.
npx --yes @stoplight/spectral-cli lint openapi.jsonis used for CI/CD integration to ensure implementation matches the security and design policy.- [DATA_EXPOSURE]: Explicitly mandates policies to prevent data leakage in error responses.
- Instructions require that stack traces, internal hostnames, database names, and user information must not be included in the
application/problem+jsonerror body. - [SAFE]: Implements proactive security measures for local services.
- Includes middleware logic to validate
OriginandHostheaders for loopback (127.0.0.1) services to mitigate DNS rebinding attacks.
Audit Metadata