fastapi-pro
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill functions as a set of behavioral guidelines and technical expertise definitions for a development assistant. It contains no executable code, remote script downloads, or shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user requirements and integrate with external APIs (e.g., via
httpx). While this creates a theoretical surface for indirect prompt injection, the instructions explicitly guide the agent to implement security best practices such as input sanitization, SQL injection prevention, and proper authentication (OAuth2/JWT), which mitigates these risks. - [METADATA_POISONING]: The metadata fields are consistent with the skill's stated purpose and do not contain hidden instructions or deceptive content.
Audit Metadata