fastapi-security-audit skillA
fastapi-security-audit is agent-read markdown (skill) from steph-dove/klaussy-agents: Use when the user wants a focused security pass over the current change — scanning the branch diff for leaked secrets, injection and SSRF, broken access control, unsafe deserialization, and newly added or vulnerable dependencies. Narrower and deeper than the general review skill: it applies only the security lenses and reports findings; it does not refactor or fix. Also known as `klaussy-security-audit`..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
You are running a security audit of the current change. Scope is the diff against the base branch and the immediate context of what it touches — not the whole tree, and not style or architecture. Report findings only; do not edit code. If `master` is missing or unset, default to `dev` if it exists, otherwise `main`. Read the change with `git diff master...HEAD` first. ## Lenses Apply each lens to the ADDED and changed lines. A finding must point to a concrete line, not a general worry. **1. Secrets & credentials** (Severity: High) - API keys, tokens, passwords, private keys, connection strings with embedded credentials, or high-entropy literals that look like real secrets in added lines. Obvious placeholders (`YOUR_API_KEY`, `xxx`, `changeme`) are not findings. **2. Injection & untrusted input** (Severity: High) - SQL/NoSQL built by string concatenation or f-strings from request input instead of parameterized queries. - Shell execution from untrusted input (`shell=True`, string-built commands, `eval`/`exec`). - Command, path-traversal, template, or header injection where user input reaches a sink unsanitized. **3. SSRF & outbound requests** (Severity: High) …
Read the whole file at its exact version.
How to install
mdr add steph-dove/klaussy-agents/fastapi-security-audit@git:20260922.549c04fmdr add steph-dove/klaussy-agents/fastapi-security-audit@sha256:a390278a2a1841efPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_sqtyc3cpthvo42yt)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260922.549c04f latest | 2026-09-22 | 549c04f | 4,037 B | A | view · diff |
| git:20260918.4ac7924 | 2026-09-18 | 4ac7924 | 14,769 B | A | view · diff |
| git:20260918.e529a80 | 2026-09-18 | e529a80 | 14,729 B | A | view · diff |
| git:20260716.30d2fb1 | 2026-07-16 | 30d2fb1 | 8,312 B | A | view · diff |
| git:20260630.a387a0a | 2026-06-30 | a387a0a | 6,266 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4037 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
steph-dove/klaussy-agents · 16 stars · license MIT · pushed 2026-09-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_sqtyc3cpthvo42yt GET https://markdownregistry.com/api/v1/resolve?ref=steph-dove/klaussy-agents/fastapi-security-audit GET https://markdownregistry.com/api/v1/blob/a390278a2a1841efc8d1552b7cf6a421b4a879bc14648fc2dc5f9d2699355d1c
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.