fastapi-service

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill retrieves authentication secrets from environment variables using os.getenv. It includes a default placeholder ('change-me') for development purposes and provides explicit instructions for the user to configure a strong shared secret in a .env.server file, following industry-standard secret management practices.
  • [EXTERNAL_DOWNLOADS]: The skill lists several well-known and standard Python libraries as dependencies, including fastapi, uvicorn, python-jose, and structlog. These are reputable packages from the official Python Package Index (PyPI) and are appropriate for the skill's stated purpose.
  • [COMMAND_EXECUTION]: The skill includes instructions for running a Python snippet locally to generate test JWT tokens and using curl to test API endpoints. These commands are transparent, user-initiated, and targeted at the local development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 11:18 PM