fastapi-templates
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill demonstrates secure handling of sensitive configuration. It utilizes the
pydantic-settingslibrary to manage environment variables and specifically mentions the use of an.envfile for secrets likeDATABASE_URLandSECRET_KEY, which is a standard security best practice to prevent hardcoded credentials. - [REMOTE_CODE_EXECUTION]: No patterns of remote code execution or suspicious external downloads were found. The implementation patterns rely on established and reputable Python libraries for web development and testing.
- [PROMPT_INJECTION]: The instructions provided are focused strictly on the technical implementation of FastAPI projects and do not contain any patterns attempting to override agent constraints or bypass safety filters.
- [BEST_PRACTICE_OBSERVATIONS]: The provided code samples include security-oriented features such as JWT-based authentication using
python-joseand password hashing withbcryptviapasslib. While the template uses a permissive CORS configuration (allow_origins=["*"]), this is documented as a starting point within the implementation patterns.
Audit Metadata