fastapi-service
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill retrieves authentication secrets from environment variables using
os.getenv. It includes a default placeholder ('change-me') for development purposes and provides explicit instructions for the user to configure a strong shared secret in a.env.serverfile, following industry-standard secret management practices. - [EXTERNAL_DOWNLOADS]: The skill lists several well-known and standard Python libraries as dependencies, including
fastapi,uvicorn,python-jose, andstructlog. These are reputable packages from the official Python Package Index (PyPI) and are appropriate for the skill's stated purpose. - [COMMAND_EXECUTION]: The skill includes instructions for running a Python snippet locally to generate test JWT tokens and using
curlto test API endpoints. These commands are transparent, user-initiated, and targeted at the local development environment.
Audit Metadata