fastapi-best-practices

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/run_ruff.py attempts to install the ruff package using pip if it is missing from the environment. This is a standard procedure for ensuring development tools are available.
  • [DYNAMIC_EXECUTION]: The scripts/run_ruff.py file uses subprocess.run to execute package management and linting commands. These operations are limited to local code maintenance and do not involve untrusted input.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for agents to perform refactoring tasks, such as removing dead code in AGENTS.md and rules/code-maintenance.md.
  • Ingestion points: Instruction documents AGENTS.md and rules/code-maintenance.md.
  • Boundary markers: None present in the skill files.
  • Capability inventory: The skill includes local execution of linting tools via subprocess.run.
  • Sanitization: Not applicable to these best practice guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 06:03 PM