The Agent Skills Directory

[SAFE]: The skill implements standard security practices including password hashing with passlib and bcrypt in core/security.py, and JWT-based authentication in api/dependencies.py.- [SAFE]: The project template correctly uses pydantic-settings to manage sensitive configuration like DATABASE_URL and SECRET_KEY through environment variables (via .env file), which is the recommended practice for avoiding credential exposure.- [SAFE]: The CORS middleware in main.py is configured with allow_origins=["*"]. While this is common for initial development, it should be restricted to specific domains in production to prevent unauthorized cross-origin access.- [SAFE]: The SQLAlchemy engine in core/database.py is initialized with echo=True. This logs all SQL queries to the console, which is helpful for debugging but should be disabled in production to avoid leaking sensitive data or schema information into application logs.

fastapi-templates