Install
$ agentstack add skill-arbazkhan971-godmode-fastapi ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
FastAPI — FastAPI Mastery
Activate When
- User invokes
/godmode:fastapi - User says "build a FastAPI app", "async API"
- User asks about Pydantic, DI, async endpoints
- When working with Python async backend services
- User says "fastapi route", "FastAPI endpoint", "route for orders"
Workflow
Step 1: Project Assessment
# Detect FastAPI project
grep -l "fastapi" pyproject.toml requirements.txt \
setup.py 2>/dev/null
# Check Python version
python3 --version
# Detect package manager
ls uv.lock poetry.lock Pipfile.lock 2>/dev/null
FASTAPI ASSESSMENT:
FastAPI version:
Python:
ORM: SQLAlchemy 2.0 async | Tortoise | SQLModel
Auth: JWT | OAuth2 | API keys
Package manager: uv (preferred) | Poetry | pip
IF Python = 80% overall
Endpoint coverage: 100% of routes
Schema tests: every validation rule tested
IF test uses real external service: mock it
Step 7: Validation & Delivery
FASTAPI VALIDATION:
| Check | Status |
|------------------------------|--------|
| Async endpoints throughout | ? |
| Pydantic schemas for all I/O | ? |
| DI via Depends() (no globals)| ? |
| Async DB driver (asyncpg) | ? |
| N+1 prevention (selectin) | ? |
| Auth on protected endpoints | ? |
| Field() constraints on schemas| ? |
| Alembic migrations present | ? |
Commit: "fastapi: — async endpoints, Pydantic schemas, pytest"
Key Behaviors
Never ask to continue. Loop autonomously until done.
- Async everywhere. One sync layer blocks all.
- Pydantic is your contract.
- DI over imports. Makes testing trivial.
- Separate schemas from models. They diverge.
- Test with HTTPX, not requests.
- Auto-generated docs are a feature. Keep accurate.
- Background tasks for side effects.
HARD RULES
- Always use async endpoints with async DB drivers.
- Never return SQLAlchemy models from endpoints.
- Never import DB sessions as module globals.
- Always separate schemas: Create, Update, Response.
- Always set expireoncommit=False on async sessions.
- Always use selectin loading for async relationships.
- Never use metadata.create_all() in production.
- Always use Field() constraints on Pydantic schemas.
- Never block event loop with CPU-intensive work.
- Always use pydantic-settings for configuration.
Auto-Detection
1. FastAPI imports, Python version, package manager
2. ORM: SQLAlchemy/Tortoise/SQLModel, async driver
3. Auth: python-jose/authlib, Pydantic v1 vs v2
4. Tests: pytest/httpx, Alembic migrations
Output Format
Print: FastAPI: {action}, {endpoints} endpoints, {models} models. Tests: {status}. Verdict: {verdict}.
TSV Logging
timestamp project endpoints models migrations tests status
Keep/Discard Discipline
KEEP if: tests pass AND quality improved
AND no regressions
DISCARD if: tests fail OR performance regressed
Stop Conditions
STOP when ANY of:
- All tasks complete and validated
- User requests stop
- Max iterations reached
Error Recovery
- mypy fails: fix models → schemas → services → routers.
- Tests fail: verify test DB configured.
- Alembic: multiple heads →
alembic merge heads. - Async issues: replace requests with httpx.AsyncClient.
- DI errors: verify Depends() function signatures.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: arbazkhan971
- Source: arbazkhan971/godmode
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.