jdconley/backend-templates
.cursor/skills/backend-templates/SKILL.md
Safe HTML templating patterns for Cloudflare Worker using Hono. Use when injecting dynamic content into HTML responses, generating meta tags, or rendering server-side HTML with user data.
$ install --global
skillsauthnpx skillsauth add jdconley/wodbrains backend-templatesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 11:27 PM227.8s1 file scanned
SKILL.md
- name:
- backend-templates
- description:
- Safe HTML templating patterns for Cloudflare Worker using Hono. Use when injecting dynamic content into HTML responses, generating meta tags, or rendering server-side HTML with user data.
Backend Templates (Hono)
When to Use
- Injecting dynamic meta tags for social sharing
- Server-side rendering of HTML that includes database or user-provided content
- Any HTML response built in the Cloudflare Worker
Safe Templating with Hono html Helper
Use html from hono/html which auto-escapes interpolated values:
import { html } from 'hono/html';
const ogTags = html`
<meta property="og:title" content="${title}" />
<meta property="og:description" content="${description}" />
`;
Key Rules
- All
${}interpolations are HTML-escaped automatically - Use
raw()only for trusted content (your own templates) - Never concatenate user data into raw strings
- Prefer tag replacement or insertion over string concatenation
Example: Safe Meta Injection
const tag = String(html`<meta property="og:title" content="${title}" />`);
htmlText = htmlText.replace(/<meta\s+property="og:title"[^>]*>/i, tag);
Related Skills
jdconley/ui-guidelines
documentation
VerifiedTrustedCommunity
UI design guidelines for WOD Brains app - mobile-first, app-like design with consistent patterns. Use when making UI changes.
1SKILL.mdUpdated Apr 16, 2026
jdconley/test-on-change
testing
VerifiedTrustedCommunity
Always create and run tests affected by changes, including Playwright for UI changes. Use when modifying Wodbrains features or UI.
1SKILL.mdUpdated Apr 16, 2026
jdconley/run-live-evals
development
VerifiedTrustedCommunity
Run Wodbrains worker parse evals and live Gemini tests locally using Wrangler `.dev.vars` keys. Use when you need to run `parse.evals.test.ts` / `parse.gemini.test.ts` against the real model (RUN_LIVE_AI_TESTS=1).
1SKILL.mdUpdated Apr 16, 2026
jdconley/readme-workflow
documentation
VerifiedTrustedCommunity
Regenerate README screenshots and the demo video for WOD Brains.
1SKILL.mdUpdated Apr 16, 2026