fastapi-developer
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill body consists of technical instructions for high-quality FastAPI development. It promotes best practices including async/await correctness, Pydantic v2 validation, and proper scope management for dependency injection.
- [SAFE]: Security-sensitive features mentioned, such as OAuth2/JWT and authorization scopes, are instructed to be maintained as boundaries, ensuring the agent prioritizes security during code modification.
- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting user-provided tasks to modify code within the workspace (capability: workspace-write).
- Ingestion points: User-provided task descriptions and existing source code files (SKILL.md).
- Boundary markers: None explicitly defined to delimit user input from instructions.
- Capability inventory: File system writes to the local workspace via code editing tools.
- Sanitization: The skill lacks explicit sanitization for incoming prompts but mandates Pydantic validation for the generated API code, providing runtime protection for the resulting application.
Audit Metadata