The Agent Skills Directory

[SAFE]: The skill serves as a reference for FastAPI development, providing templates for models, routers, and middleware that follow industry-standard security practices.
[SAFE]: The included bash scripts (scripts/scaffold-api.sh and tests/run.sh) are safe for use. The scaffolding utility operates exclusively via stdout, preventing unintended file overwrites, and the test script uses isolated temporary directories for validation.
[INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting user data through FastAPI request models, which is an inherent part of web API development. It proactively addresses injection risks by demonstrating how to implement rigorous validation using Pydantic's built-in constraints and custom logic.
Ingestion points: FastAPI model definitions in SKILL.md, references/validation-serialization.md, and assets/fastapi-template.py.
Boundary markers: The templates use Pydantic schemas to define explicit boundaries for untrusted input.
Capability inventory: The skill is scoped to API development and project scaffolding; it contains no dangerous subprocess, network exfiltration, or persistence logic.
Sanitization: Documentation highlights sanitization using Pydantic field constraints (min_length, ge, etc.) and specialized validation types like EmailStr.

python-fastapi-ops