production-fastapi
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guidelines for building secure and performant FastAPI applications.
- [SAFE]: Recommended practices include using parameterized queries to prevent SQL injection, implementing security headers via middleware, and using non-root users in Docker containers.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses a vulnerability surface where the application processes external request data. It mitigates this by enforcing strict Pydantic validation and recommending RFC 7807 error formatting to prevent sensitive information disclosure.
- Ingestion points: FastAPI route handlers and request models defined in
SKILL.mdandtemplates/main.py.template. - Boundary markers: The skill recommends using Pydantic's
strict=Trueconfiguration and explicit field validation patterns. - Capability inventory: The templates include database access (
sqlalchemy), network operations (httpx), and logging (structlog). - Sanitization: Input is validated via Pydantic models; SQL queries are parameterized using
sqlalchemy.text.
Audit Metadata