fastapi-microservices-development
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: In
EXAMPLES.md, the Redis Caching Layer section provides code that uses thepicklemodule for serializing and deserializing cached data. The use ofpickle.loads(value)on data retrieved from the cache is an unsafe deserialization pattern. If an attacker manages to modify the data in the Redis instance, they could achieve arbitrary code execution on the application server. - [INDIRECT_PROMPT_INJECTION]: The skill describes multiple ingestion points for external data, creating an attack surface for indirect prompt injection.
- Ingestion points: REST API endpoints (e.g.,
create_userinauth.py,upload_fileinfile_upload.py) and WebSocket connections (e.g.,websocket_chat.py) handle user-provided payloads and files. - Boundary markers: The skill extensively uses Pydantic schemas (
UserCreate,ItemCreate) as boundary markers to validate input types and structures. - Capability inventory: The skill possesses capabilities for database operations (SQLAlchemy, Motor), file system modifications (
aiofiles), and outbound network requests (httpx). - Sanitization: While type validation is enforced by Pydantic, the skill relies on developers to implement further sanitization against malicious instructions embedded in strings.
Audit Metadata