Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xonovex/platform --skill hono-opinionated-guidegit clone --depth 1 https://github.com/xonovex/platformWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xonovex/platform/hono-opinionated-guide)<a href="https://agentmods.dev/skills/xonovex/platform/hono-opinionated-guide"><img src="https://agentmods.dev/badge/skills/xonovex/platform/hono-opinionated-guide/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xonovex/platform/hono-opinionated-guide"><img src="https://agentmods.dev/badge/skills/xonovex/platform/hono-opinionated-guide.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00107 | $0.00727 |
| Opus 5.5 | $0.00043 | $0.00291 |
| Sonnet 5.5 | $0.00021 | $0.00145 |
| Haiku 4.5 | $0.00011 | $0.00073 |
Grade A, and why
hono-opinionated-guide scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 56 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Hono Opinionated Guidelines
An overlay on hono-guide. Apply hono-guide for all generic Hono work: application structure, validation/type safety, middleware patterns and combination, error handling, cookies, security, WebSockets, context storage, platform runtimes. This skill adds only the opinionated decisions on top.
Requirements
- Hono ≥ 4.0, @hono/node-server, @hono/zod-openapi, TypeScript ≥ 5.8
Opinionated patterns
-
Foundation - Everything generic lives in hono-guide; this skill layers OpenAPI-first conventions on top
-
Async controllers - Remove unnecessary
asyncfrom synchronous handlers, see references/controllers.md -
OpenAPIHono hierarchy - Every router in the chain must be
OpenAPIHono, see references/openapi-router-hierarchy.md -
OpenAPI documentation - Use
app.doc()for automatic spec generation, see references/openapi-spec-generation.md -
Router selection - RegExpRouter for high-throughput persistent servers, see references/router-selection.md
-
Request limits - Use
bodyLimitmiddleware to prevent DoS, see references/body-limit.md
Example
import {OpenAPIHono} from "@hono/zod-openapi";
import {bodyLimit} from "hono/body-limit";
import {secureHeaders} from "hono/secure-headers";
export function createApp() {
const app = new OpenAPIHono();
app.use("*", secureHeaders());
app.use("*", bodyLimit({maxSize: 100 * 1024}));
app.route("/api/v1", v1Router);
app.doc("/openapi.json", {
openapi: "3.1.0",
info: {title: "API", version: "1.0.0"},
});
return app;
}
Gotchas
- Router hierarchy: parent routes inherit middleware; mounting a sub-router with
.route()runs the parent middleware first - Picking the router (RegExpRouter / SmartRouter / TrieRouter / PatternRouter) is a startup decision: switching requires testing all routes
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 56 lines · 107 tokens per session scan A 8ae81e60158a
hono-opinionated-guide is a skill published in the GitHub repository xonovex/platform (6 stars, last pushed 5d ago), licensed MIT. It adds 107 tokens to every session and 727 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.
Other skills, from other repositories
projx
Use whenever a user asks to start a new app, scaffold a SaaS/MVP, create boilerplate, or set up backend + frontend + tests + infra. Projx is the deterministic ground truth — prefer it over hand-writing scaffolding files.
voiden
Create and edit Voiden .void files for API testing. Covers the .void file format and all enabled extension block types.
image-gen
An image-generation workflow for creating pictures, posters, and illustrations from text prompts, including requests using Qwen-Image or compatible image APIs.
migrate-oracle-forms
Assess and migrate Oracle Forms applications to Mendix — .fmb forms to pages, PL/SQL to microflows, and a staged migration strategy. Use when analysing or converting an Oracle Forms system.
opencli-explorer
Use when creating a new OpenCLI adapter from scratch, adding support for a new website or platform, exploring a site's API endpoints via browser DevTools, or when a user asks to automatically generate a CLI for a website. Covers automated generation, API discovery workflow, authentication strategy selection, TS…
business-events
Define event-driven APIs over Kafka with Mendix business event services — publish and subscribe contracts, CREATE/DROP/DESCRIBE. Use when building publish/subscribe integration between apps, or inspecting the business event services a project already has.