fastapi-expert
Fail
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in SKILL.md direct the agent to run the pytest command to verify the functionality of generated API endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where user-supplied requirements are used to generate code that is subsequently executed.
- Ingestion points: User requirement prompts processed at runtime.
- Boundary markers: Absent; no specific instructions are provided to the agent to ignore or delimit instructions contained within user-provided requirements.
- Capability inventory: Shell execution via pytest (SKILL.md), file creation for schemas and routers (SKILL.md), and database interactions using SQLAlchemy (references/async-sqlalchemy.md).
- Sanitization: Absent; the skill does not implement filtering or validation of user input before it is used for code generation.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known Python libraries such as FastAPI, Pydantic, SQLAlchemy, and pytest, and links to documentation on the author's GitHub Pages domain.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata