@tank/fastapi-mastery

Pass

Audited by Gen Agent Trust Hub on May 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or obfuscation were detected in the skill instructions or reference files.
  • [EXTERNAL_DOWNLOADS]: The skill mentions and recommends standard industry libraries for Python development, such as FastAPI, SQLAlchemy, and Pydantic. No suspicious remote code execution or untrusted script downloads are present.
  • [DATA_EXPOSURE]: While the skill manifest requests filesystem read access for all files (**/*), this is a common permission for developer assistant skills to provide context-aware analysis and support for project structures. No evidence of data exfiltration or hardcoded secrets was found; the skill correctly recommends using environment variables for sensitive configuration.
  • [COMMAND_EXECUTION]: The skill documents standard CLI tools for development and deployment (e.g., uvicorn, alembic, docker, pytest), but does not contain instructions that automatically execute dangerous or privileged commands.
Audit Metadata
Risk Level
SAFE
Analyzed
May 31, 2026, 11:04 PM
Security Audit — agent-trust-hub — @tank/fastapi-mastery