fastapi-templates
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a template for processing untrusted user data via API endpoints, creating a potential surface for indirect prompt injection.
- Ingestion points: Data enters the system through the
UserCreateandUserUpdatePydantic schemas inapi/v1/endpoints/users.py. - Boundary markers: The skill does not provide explicit boundary markers or instructions to the agent to treat processed data as untrusted content.
- Capability inventory: The
BaseRepositoryinrepositories/base_repository.pyhas extensive capabilities for database read and write operations. - Sanitization: While Pydantic provides type safety, there is no explicit sanitization or filtering logic to prevent the processing of malicious instructions embedded in user-supplied text.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The application setup includes an overly permissive Cross-Origin Resource Sharing (CORS) configuration.
- Evidence: The middleware in
main.pyusesallow_origins=["*"], which permits requests from any origin. This bypasses the Same-Origin Policy (SOP) and could facilitate data exfiltration or unauthorized access if not properly configured for a specific domain.
Audit Metadata