FastAPI Background Tasks
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
arqpackage from the official Python package index. This is a well-known and reputable library for asynchronous task management. - [COMMAND_EXECUTION]: Includes the standard CLI command
arq app.workers.main.WorkerSettingsto initialize and run the background worker process. - [PROMPT_INJECTION]: The skill demonstrates a pattern for ingesting user data via a logging endpoint.
- Ingestion points: The
/logPOST endpoint inSKILL.mdaccepts an unvalidatedmessagestring. - Boundary markers: No delimiters or boundary markers are used in the logging implementation.
- Capability inventory: The skill utilizes file system write capabilities via the
write_logfunction (open("log.txt", "a")). - Sanitization: No input sanitization or validation is applied to the message before it is written to the local log file.
Audit Metadata