The Agent Skills Directory

[SAFE]: The skill provides extensive documentation on secure FastAPI development, aligning with OWASP best practices and emphasizing defense-in-depth.
[SAFE]: It mandates strict input validation using Pydantic models and enforces strong password hashing with Argon2 to prevent credential-related vulnerabilities.
[SAFE]: The skill provides specific patterns for mitigating common attack vectors such as SQL injection (via parameterized queries), DoS (via rate limiting and Starlette upgrades), and broken access control.
[SAFE]: It addresses critical security configurations by recommending the removal of development features like API documentation in production environments and the implementation of restrictive CORS policies.
[SAFE]: Security-sensitive operations, such as file uploads and command execution, include robust sanitization steps such as magic byte verification and input character filtering.
[SAFE]: The skill documentation includes a formal threat model using STRIDE analysis to educate developers on potential risks and their associated mitigations.

fastapi