skills/philtzjp/skills/hono/Gen Agent Trust Hub

hono

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the use of npx --yes @stoplight/spectral-cli to download and execute the Spectral linting tool.
  • This tool is a well-known, industry-standard utility for validating OpenAPI specifications.
  • [COMMAND_EXECUTION]: Provides specific shell commands for linting generated API documentation.
  • npx --yes @stoplight/spectral-cli lint openapi.json is used for CI/CD integration to ensure implementation matches the security and design policy.
  • [DATA_EXPOSURE]: Explicitly mandates policies to prevent data leakage in error responses.
  • Instructions require that stack traces, internal hostnames, database names, and user information must not be included in the application/problem+json error body.
  • [SAFE]: Implements proactive security measures for local services.
  • Includes middleware logic to validate Origin and Host headers for loopback (127.0.0.1) services to mitigate DNS rebinding attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:01 PM