The Agent Skills Directory

[SAFE]: No security issues detected. The skill instructions and code snippets consist of standard technical documentation and implementation guides for a well-known authentication library.
[CREDENTIALS_UNSAFE]: The code snippets use an explicit placeholder string ('CHANGE-ME-TO-STRONG-PASSPHRASE') for sensitive configuration, which is a standard and safe practice for instructional documentation.
[EXTERNAL_DOWNLOADS]: The skill references standard installation procedures for the 'fastapi-users' package from official package registries.
[SAFE]: The skill possesses a surface for indirect prompt injection as it processes user-supplied data.
Ingestion points: User schemas defined in SKILL.md (UserCreate, UserUpdate).
Boundary markers: None explicitly defined in snippets; relies on Pydantic validation.
Capability inventory: Database persistence and user management operations across the UserManager class.
Sanitization: Utilizes built-in validation provided by the 'fastapi-users' library and Pydantic.
[SAFE]: The documentation includes a 'Caveats' section that correctly identifies and warns against common security pitfalls such as weak secret management, missing CSRF protection for cookie-based auth, and risks associated with OAuth account linking.

fastapi-users-core