File appears to expose a hardcoded API secret or token.
Critical
- Code
- suspicious.exposed_secret_literal
- Location
- templates.md:34
Security audit
FastAPI
Security checks across malware telemetry and agentic risk
Overview
This FastAPI skill is a documentation-only guide whose behavior is coherent with helping users build, debug, and harden FastAPI services.
Reasonable to install if you want FastAPI-specific coding guidance. Be aware it may record stated preferences in its disclosed local config path, and its examples include production topics such as auth, secrets, databases, and background jobs that should be adapted carefully to your app.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.exposed_secret_literal