fastapi-local-dev
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard, well-documented commands for running FastAPI applications using Uvicorn and Gunicorn. The use of
0.0.0.0as a host and specific port configurations (e.g., 8000) is standard for local development and containerized environments. - [SAFE]: The systemd configuration follows best practices for security, such as running the service as a non-privileged user (
www-data), settingNoNewPrivileges=true, and usingPrivateTmp=trueto isolate the process. - [SAFE]: The Dockerfiles and
docker-compose.yamlprovide a clear and secure way to build and run the application, including the recommended practice of installing dependencies before copying the application code to leverage Docker's layer caching. - [SAFE]: Troubleshooting steps, such as using
lsofandkillto manage ports or settingWATCHFILES_FORCE_POLLING=truefor WSL environments, are standard developer practices and do not pose a security risk in this context. - [SAFE]: The skill uses
PYTHONPATH=.andpython -m uvicornto handle import issues, which is a correct and safe way to manage Python module resolution during local development.
Audit Metadata