python-dev

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a robust set of security-focused development patterns for the Python ecosystem.
  • [SAFE]: It mandates the use of Pydantic v2 for all API input validation, ensuring strict boundary checks for request data.
  • [SAFE]: Includes specific instructions for security-critical operations, such as requiring hmac.compare_digest for timing-safe internal secret verification to prevent side-channel attacks.
  • [SAFE]: Provides clear guidance on secure credential management, explicitly forbidding hardcoded secrets and mandating minimum length constraints for sensitive configuration fields.
  • [SAFE]: All referenced external dependencies (FastAPI, SQLAlchemy, Pydantic, Google Cloud SDKs, etc.) are well-known, legitimate libraries commonly used in enterprise Python development.
  • [SAFE]: The included templates for authentication (JWT, bcrypt rounds) and error handling follow industry standards for security and resilience.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 01:53 PM
Security Audit — agent-trust-hub — python-dev