fastapi-fullstack
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical documentation and boilerplate generator for FastAPI development. It adheres to security best practices, such as recommending environment variables for configuration and using industry-standard libraries for password hashing (bcrypt) and data validation (Pydantic).
- [COMMAND_EXECUTION]: The skill includes instructions for running standard development commands (e.g., uvicorn, pytest, ruff, pyright) and provides templates for Python scripts that interact with databases. All command patterns are routine for the stated purpose of full-stack development.
- [EXTERNAL_DOWNLOADS]: References to external packages (e.g., FastAPI, SQLAlchemy, MySQL drivers) are limited to standard, well-known libraries from the official Python Package Index (PyPI). No untrusted remote scripts or binary downloads are present.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or secrets were found. The skill explicitly instructs users to load sensitive information from environment variables using Pydantic Settings, which is a recommended security practice.
Audit Metadata