skills/vcode-sh/vibe-tools/hono-guide/Gen Agent Trust Hub

hono-guide

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves exclusively as an educational resource and documentation suite for the Hono web framework. All analyzed files contain API references, implementation guides, and best practices.
  • [CREDENTIALS_UNSAFE]: While various files (e.g., references/middleware-auth.md, references/helpers-auth-streaming.md) contain hardcoded strings like 'secret', 'your-secret-token', and 'my-secret-key', these are used strictly as illustrative placeholders within documentation examples and do not constitute actual credential exposure.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes how to build applications that ingest untrusted data from HTTP requests (Category 8). However, it strongly emphasizes security best practices, including built-in XSS protection in the HTML helper, and provides extensive documentation for security middleware such as CORS, CSRF, and Secure Headers, as well as robust input validation patterns using Zod and Standard Schema.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:37 PM