fastapi
Facilitates the development of FastAPI applications with structured patterns, dependency injection, and JWT authentication.
Install this skill
or
90/100
Security score
The fastapi skill was audited on Jun 7, 2026 and we found 6 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 344
Webhook reference - potential data exfiltration
SourceSKILL.md
| 344 | # runs after response is sent — good for emails, webhooks, cache invalidation |
low line 253
Access to .env file
SourceSKILL.md
| 253 | env_file=".env", |
medium line 481
Access to .env file
SourceSKILL.md
| 481 | - [ ] Settings loaded via `pydantic-settings` from env / `.env` file |
low line 81
External URL reference
SourceSKILL.md
| 81 | allow_origins=["http://localhost:3000"], |
low line 250
External URL reference
SourceSKILL.md
| 250 | allowed_origins: list[str] = ["http://localhost:3000"] |
low line 436
External URL reference
SourceSKILL.md
| 436 | async with AsyncClient(transport=ASGITransport(app=app), base_url="http://test") as c: |
Scanned on Jun 7, 2026
View Security Dashboard