fastapi-local-dev

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard, well-documented commands for running FastAPI applications using Uvicorn and Gunicorn. The use of 0.0.0.0 as a host and specific port configurations (e.g., 8000) is standard for local development and containerized environments.
  • [SAFE]: The systemd configuration follows best practices for security, such as running the service as a non-privileged user (www-data), setting NoNewPrivileges=true, and using PrivateTmp=true to isolate the process.
  • [SAFE]: The Dockerfiles and docker-compose.yaml provide a clear and secure way to build and run the application, including the recommended practice of installing dependencies before copying the application code to leverage Docker's layer caching.
  • [SAFE]: Troubleshooting steps, such as using lsof and kill to manage ports or setting WATCHFILES_FORCE_POLLING=true for WSL environments, are standard developer practices and do not pose a security risk in this context.
  • [SAFE]: The skill uses PYTHONPATH=. and python -m uvicorn to handle import issues, which is a correct and safe way to manage Python module resolution during local development.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:53 PM
Security Audit — agent-trust-hub — fastapi-local-dev