fastapi-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/run_ruff.pyattempts to install theruffpackage usingpipif it is missing from the environment. This is a standard procedure for ensuring development tools are available. - [DYNAMIC_EXECUTION]: The
scripts/run_ruff.pyfile usessubprocess.runto execute package management and linting commands. These operations are limited to local code maintenance and do not involve untrusted input. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for agents to perform refactoring tasks, such as removing dead code in
AGENTS.mdandrules/code-maintenance.md. - Ingestion points: Instruction documents
AGENTS.mdandrules/code-maintenance.md. - Boundary markers: None present in the skill files.
- Capability inventory: The skill includes local execution of linting tools via
subprocess.run. - Sanitization: Not applicable to these best practice guidelines.
Audit Metadata