api-design-python
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional content and architectural guidelines for software development. It does not include any malicious code, obfuscated commands, or patterns for unauthorized data access.
- [EXTERNAL_DOWNLOADS]: The skill recommends the use of standard, reputable Python libraries from official package registries (PyPI) to implement functionality such as web routing, database interaction, and authentication.
- [CREDENTIALS_SAFE]: The instructions explicitly mandate secure credential handling practices, including the use of environment variables, exclusion of secrets from version control through .gitignore, and utilizing Pydantic's SecretStr for sensitive data types to prevent accidental logging or exposure.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes systems that ingest external HTTP data, it proactively mitigates risk by enforcing strict input validation using Pydantic schemas and establishing response models as security boundaries to prevent unintended data leakage.
- Ingestion points: FastAPI endpoints defined in routers/.
- Boundary markers: Explicit Pydantic validation schemas (SCH-4).
- Capability inventory: Database access (SQLAlchemy) and object storage interaction (Boto3).
- Sanitization: Automatic type validation and schema-based filtering of response data.
Audit Metadata