fastapi

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and style guide for FastAPI development. It promotes secure coding practices such as using Pydantic v2 for data validation, JWT/Redis for authentication, and bcrypt for password hashing.
  • [DATA_EXPOSURE]: The provided docker-compose.yml example contains placeholder credentials (e.g., 123456). These are standard development examples and do not represent a leak of actual production secrets.
  • [EXTERNAL_DOWNLOADS]: The documentation references a well-known community repository on GitHub (zhanymkanov/fastapi-best-practices) as an architectural benchmark. This is a neutral reference to established industry resources.
  • [PROMPT_INJECTION]: No evidence of prompt injection, role-play instructions, or safety filter bypasses was found. The instructions are focused on technical implementation and coding standards.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes building APIs that ingest untrusted user data. However, it explicitly mandates the use of Pydantic v2 for strict schema validation and data type enforcement, which is an industry-standard mitigation for injection-style attacks in web applications.
  • [DYNAMIC_CONTEXT_INJECTION]: No use of dynamic shell execution placeholders (such as the !command syntax) was detected in the markdown content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 02:07 AM
Security Audit — agent-trust-hub — fastapi