api-review

Identify and remediate security flaws, performance inefficiencies, and architectural anti-patterns in FastAPI code.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/Nerfherder16/BrickLayer --skill api-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-review
Source: https://github.com/Nerfherder16/BrickLayer/tree/main/.claude/skills/api-review
Command: npx skills add https://github.com/Nerfherder16/BrickLayer --skill api-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

FastAPI projects frequently suffer from security vulnerabilities, performance inefficiencies, and inconsistent adherence to best practices, leading to leaks, slow responses, and brittle code.

Core Features & Use Cases

  • Security checks: input validation, auth, CORS, secrets handling.
  • Performance assessments: N+1 queries, async usage, slow endpoints, caching opportunities.
  • Best practices guidance: error handling, DI, logging, testing recommendations.
  • Use cases include auditing public APIs, refactoring monoliths, and onboarding teams to secure FastAPI deployments.

Quick Start

Run the api-review skill against your FastAPI project to generate a prioritized security and performance assessment.

Frequently Asked Questions about api-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review FastAPI code for security vulnerabilities and performance issues?

Review FastAPI code by validating input, authentication, and CORS configurations, then assessing async usage and N+1 queries. This identifies security flaws and performance inefficiencies while providing actionable code-level fixes and design changes.

What are common FastAPI architectural anti-patterns to check for?

Common FastAPI anti-patterns include improper dependency injection, poor error handling, and inefficient database access. Identifying these architectural issues ensures adherence to best practices across models, routers, and services for secure deployments.

Does FastAPI code review cover authentication and dependency injection?

Yes, FastAPI code review covers authentication, secrets handling, and dependency injection. It validates these components across models, routers, and services to ensure secure and standardized implementations in typical projects with endpoints and database access.

How do I fix N+1 queries and slow endpoints in my FastAPI application?

Fix N+1 queries and slow endpoints by assessing async usage and identifying caching opportunities. The review generates a prioritized performance assessment targeting database access inefficiencies and recommending actionable optimizations.

What's the best way to audit a public FastAPI deployment for best practices?

The best way to audit a public FastAPI deployment is to run a comprehensive review of endpoints, dependencies, and database access. This generates a prioritized assessment of security flaws, performance bottlenecks, and best practice violations.

When should I run a security and performance assessment on my FastAPI project?

Run a security and performance assessment when refactoring monoliths, onboarding teams, or preparing public APIs. It identifies architectural anti-patterns and validates input handling to prevent leaks, slow responses, and brittle code.