production-fastapi

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive guidelines for building secure and performant FastAPI applications.
  • [SAFE]: Recommended practices include using parameterized queries to prevent SQL injection, implementing security headers via middleware, and using non-root users in Docker containers.
  • [INDIRECT_PROMPT_INJECTION]: The skill addresses a vulnerability surface where the application processes external request data. It mitigates this by enforcing strict Pydantic validation and recommending RFC 7807 error formatting to prevent sensitive information disclosure.
  • Ingestion points: FastAPI route handlers and request models defined in SKILL.md and templates/main.py.template.
  • Boundary markers: The skill recommends using Pydantic's strict=True configuration and explicit field validation patterns.
  • Capability inventory: The templates include database access (sqlalchemy), network operations (httpx), and logging (structlog).
  • Sanitization: Input is validated via Pydantic models; SQL queries are parameterized using sqlalchemy.text.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 03:49 PM