building-python-web-apps
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides architectural templates and educational content for web development that adhere to security best practices. It includes robust authentication mechanisms using bcrypt, implements global CSRF protection for cookie-based auth, and provides a secure method for deriving client IP addresses behind reverse proxies.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and reputable libraries and services, including Stripe, Sentry, and PostHog. It also utilizes official container images from recognized developers such as astral-sh. These resources are standard in the industry and integrated in a secure manner.
- [SAFE]: The provided patterns for handling external data, such as webhooks and user input, include robust validation via Pydantic schemas and signature verification, which effectively mitigate risks associated with untrusted data ingestion.
Audit Metadata