fastapi-fullstack
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The skill clones a repository from
https://github.com/tiangolo/full-stack-fastapi-template.git. Since this repository is not part of the specified trusted organizations, it is treated as an unverifiable external dependency. - COMMAND_EXECUTION (MEDIUM): The setup process involves running
pip install -r requirements.txtanddocker compose up -dagainst files from the cloned repository. This allows for the execution of arbitrary scripts or binary packages defined by an external party. - PROMPT_INJECTION (LOW): The skill facilitates an indirect prompt injection surface. 1. Ingestion points: The entire directory structure of the cloned repository. 2. Boundary markers: None. 3. Capability inventory:
pip install,docker compose, anduvicorn. 4. Sanitization: None. - DATA_EXPOSURE & EXFILTRATION (SAFE): No patterns of sensitive file access or network exfiltration of local data were detected.
Audit Metadata