Assess security weaknesses in FastAPI applications across DI, middleware, and auth.
npx skills add https://github.com/xalgord/xalgorix --skill fastapi-xalgord
Please help me install this Agent Skill. Skill: fastapi Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/frameworks/fastapi Command: npx skills add https://github.com/xalgord/xalgorix --skill fastapi-xalgord
Provides security testing guidance for FastAPI applications, focusing on uncovering dependency injection flaws, middleware gaps, and authorization drift across routers.
Run a targeted security assessment on a FastAPI project to identify DI weaknesses, middleware misconfigurations, and access-control gaps.
High-intent search queries and answers about installing and using this skill.
To test FastAPI security vulnerabilities, you perform static code analysis, inspect OpenAPI schemas, and map runtime endpoints to reveal misconfigurations and insecure patterns across dependency injection, middleware, and auth.
Auditing FastAPI dependency injection involves analyzing DI graphs and security hooks to uncover bypasses and unauthorized access between routers, ensuring dependencies enforce proper access controls and authorization.
Yes, you can assess FastAPI middleware gaps by analyzing the middleware stack for CORS, authentication, and lifespan misconfigurations to identify missing security layers and insecure patterns.
Yes, security testing is applicable to ASGI FastAPI projects with multiple routers, dependencies, and middleware stacks, allowing comprehensive assessment of authorization drift and access-control gaps.
The best way to discover unauthorized access between FastAPI routers is through OpenAPI route mapping and static analysis of auth and admin endpoints to identify authorization drift and DI bypasses.
FastAPI authorization drift occurs across routers when dependency injection security hooks and middleware are inconsistently applied, allowing unauthorized access gaps to form as routes are added or modified.
CrazyDubyaGenerate OpenAPI 3.0 documentation from API route definitions in code.
n4igmeIdentify access-control vulnerabilities in API and web endpoints.
Arnutt-NDetect OWASP Top 10 risks and misconfigurations in HR-IMS code.
jassicsAutomate MASTG-based mobile penetration tests on Android and iOS apps.
