fastapi
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains legitimate Python code examples for developing with the FastAPI framework. The code follows community best practices, such as using Pydantic for data validation and standard OAuth2/JWT flows for authentication.
- [INDIRECT_PROMPT_INJECTION]: The skill defines endpoints that ingest external data, representing a typical API attack surface.
- Ingestion points: API request bodies in the
create_userandloginfunctions defined inSKILL.md. - Boundary markers: The skill uses Pydantic
BaseModelschemas to delimit and validate incoming JSON data. - Capability inventory: The skill demonstrates database operations (SQLAlchemy) and JWT token generation.
- Sanitization: Type validation and schema enforcement are handled by Pydantic models, which is the standard safety measure for this framework.
Audit Metadata