fastapi-templates
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements API endpoints that ingest untrusted user data into the application's data layer, creating a surface where malicious instructions could be embedded and subsequently processed by an agent.\n
- Ingestion points: The
create_userandupdate_userendpoints inreferences/details.mdaccept arbitrary JSON payloads mapped to Pydantic schemas.\n - Boundary markers: No specific delimiters or instruction-ignoring prompts are defined in the templates to isolate untrusted data from the agent's control flow.\n
- Capability inventory: The template includes full CRUD capabilities (create, read, update, delete) for database entities via the
BaseRepositoryandUserServicepatterns.\n - Sanitization: While Pydantic provides type validation and
passlibhandles password hashing, there is no logic present to sanitize or escape data specifically for safety within an LLM context.
Audit Metadata