hono

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the Hono framework and related dependencies (such as Zod) via official package managers (npm, bun). These resources originate from the well-known Hono ecosystem and official registries.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for building web APIs that process untrusted data from HTTP requests.
  • Ingestion points: The skill demonstrates using c.req.json(), c.req.query(), and c.req.param() to handle external input.
  • Boundary markers: Not applicable for static analysis, but the skill explicitly recommends using zValidator to enforce structure on ingested data.
  • Capability inventory: The demonstrated code interacts with databases (Cloudflare D1) and returns network responses.
  • Sanitization: The skill highlights best practices for sanitization and validation using Zod schemas to prevent processing of malicious payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 03:23 AM