fastapi
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents legitimate usage of the FastAPI framework and its ecosystem.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file paths were detected. The skill provides an example of using environment variables (
SHOP_API_KEYS) for authentication, which aligns with security best practices. - [COMMAND_EXECUTION]: Python environment setup and installation commands utilize standard tools (
python -m venv,pip install). The execution of the API viafastapi devandfastapi runis the intended purpose of the skill. - [REMOTE_CODE_EXECUTION]: No suspicious remote code execution patterns or unverified external dependencies were found. Only official packages from the FastAPI ecosystem are referenced.
- [INDIRECT_PROMPT_INJECTION]: While the skill creates endpoints that ingest user data (e.g.,
ItemCreate), it includes robust Pydantic validation schemas to constrain input (e.g.,min_length,max_length,gt: 0). It does not pass this data to an LLM, mitigating typical injection risks.
Audit Metadata