hono
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches application templates from the official framework repository at
honojs/starterand guidance content from the author's repository atyusukebe/hono-skill.- [INDIRECT_PROMPT_INJECTION]: The skill establishes a data ingestion surface by directing the agent to read and follow instructions from external GitHub repositories. - Ingestion points:
SKILL.md(references toyusukebe/hono-skillandhonojs/starterrepositories). - Boundary markers: None provided for the remote content.
- Capability inventory: Project scaffolding (
bun create) and generating HTTP server code. - Sanitization: No sanitization or validation is specified for the content fetched from the remote repositories.
Audit Metadata