fastapi-templates

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill demonstrates secure handling of sensitive configuration. It utilizes the pydantic-settings library to manage environment variables and specifically mentions the use of an .env file for secrets like DATABASE_URL and SECRET_KEY, which is a standard security best practice to prevent hardcoded credentials.
  • [REMOTE_CODE_EXECUTION]: No patterns of remote code execution or suspicious external downloads were found. The implementation patterns rely on established and reputable Python libraries for web development and testing.
  • [PROMPT_INJECTION]: The instructions provided are focused strictly on the technical implementation of FastAPI projects and do not contain any patterns attempting to override agent constraints or bypass safety filters.
  • [BEST_PRACTICE_OBSERVATIONS]: The provided code samples include security-oriented features such as JWT-based authentication using python-jose and password hashing with bcrypt via passlib. While the template uses a permissive CORS configuration (allow_origins=["*"]), this is documented as a starting point within the implementation patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 03:32 PM
Security Audit — agent-trust-hub — fastapi-templates