I run several hidden services. Make sure you lock the site down! On my sites I see hundreds of hack attempts a day. Most are script kiddies scanning the site for the usual things like /wp-admin and /uploads.
Dont use any javascript in your site. Tor browsers set for secure browsing dont allow javascript.
With out knowing anything other than the name I really cant give any more specific advice.