fastapi-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling untrusted external data, which creates a surface for indirect prompt injection.\n
- Ingestion points: Data ingestion occurs through JWT payloads in
SKILL.md, request headers inRequestIdMiddleware(found inreferences/middleware-examples.md), and query parameters in WebSocket connections.\n - Boundary markers: The skill relies on standard FastAPI and Pydantic validation. It does not explicitly define delimiters or instructions for the agent to disregard potential commands embedded within data processed by these services.\n
- Capability inventory: The associated platform environment supports command execution (
Bash) and file system modifications (Write,Edit), which are sensitive capabilities if the agent is misled by external data.\n - Sanitization: The instructions recommend robust sanitization and security practices, including cryptographic JWT validation via the
joselibrary, Pydantic schema enforcement, and restrictive CORS origin policies.
Audit Metadata