web-application
Fail
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: CRITICAL
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were found. The instructions are purely technical and development-oriented.
- [DATA_EXFILTRATION]: No sensitive data exposure or exfiltration patterns were detected. The skill specifically promotes the use of
SecretStrfor handling credentials and provides guidance against logging sensitive information. - [REMOTE_CODE_EXECUTION]: There are no remote code execution patterns, such as piping network downloads to a shell. All mentioned dependencies are standard industry tools (e.g., FastAPI, SQLAlchemy, Alembic).
- [OBFUSCATION]: No obfuscated code, hidden Unicode characters, homoglyph attacks, or multi-layer Base64 encoding were found.
- [COMMAND_EXECUTION]: No dangerous command execution or privilege escalation attempts were identified. CLI examples provided are standard for Alembic and Pydantic development workflows.
- [EXTERNAL_DOWNLOADS]: References to external documentation, including the official HTTPX documentation site (python-httpx.org), are informative and point to well-known technology resources.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes processing external data, it explicitly teaches mitigation strategies such as boundary validation using Pydantic and parameterized queries using SQLAlchemy to prevent injection vulnerabilities.
Recommendations
- Contains 4 malicious URL(s) - DO NOT USE
Audit Metadata