fastapi-martinholovsky
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-quality instructional guide for building secure FastAPI applications, emphasizing industry best practices such as Test-Driven Development (TDD), Pydantic validation, and restrictive CORS policies.
- [SAFE]: It provides specific, up-to-date guidance on mitigating critical vulnerabilities like CVE-2024-47874 (Starlette Multipart DoS) and CVE-2024-12868.
- [SAFE]: Security-enhancing dependencies such as slowapi, secure, python-jose, and passlib are used with appropriate version constraints to ensure generated applications are protected against common attacks.
- [SAFE]: Implementation patterns for JWT authentication and database connection pooling follow standard security and performance guidelines, avoiding common pitfalls like hardcoded secrets or sequential API calls.
- [SAFE]: The skill includes a detailed STRIDE threat model and OWASP Top 10 mapping to educate the agent on domain-specific risks and proper mitigation strategies.
Audit Metadata