python-fastapi-ops

Fail

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: HIGHCREDENTIALS_UNSAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The application template in assets/fastapi-template.py contains hardcoded database credentials in the database_url default value of the Settings class.\n
  • Evidence: database_url: str = "postgresql+asyncpg://user:pass@localhost/db"\n
  • Context: Storing credentials as default values in configuration code can lead to unauthorized access if developers fail to override them via environment variables in production environments.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 9, 2026, 10:05 PM