📦
pytest-recording
79Record and Replay HTTP Tests with pytest
Live API calls make tests slow and unreliable. This skill guides pytest-recording setup, cassette management, secret filtering, and replay debugging.
Coding & Development View
Skills uvicorn
📦
uvicorn
Content revision r2 Safe ⚙️ External commands🌐 Network access📁 Filesystem access
Configure Uvicorn for ASGI Applications
Running ASGI applications requires correct server, reload, worker, logging, TLS, and container settings. This skill provides practical Uvicorn patterns for development and deployment.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "uvicorn" from https://skillstore.io/skills/bossjones-uvicorn.md and its manifest at https://skillstore.io/api/skills/bossjones-uvicorn/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "uvicorn". Prepare a local FastAPI setup for main:app on port 8000.
Expected outcome:
Recommended setup: run main:app on localhost port 8000 with reload enabled. Reload remains limited to development, and each setting is explained.
Using "uvicorn". Review a container configuration that publishes Uvicorn with reload and four workers.
Expected outcome:
Review result: remove reload in production, verify worker support, keep container binding explicit, restrict host exposure, and add a health check.
Security Audit
Safev8 • 7/23/2026 Open versioned report
The 45 external-command alerts are false positives caused by Markdown fences and inline option formatting; no backtick execution exists. Temporary socket usage, placeholder TLS paths, container binding, loopback documentation, and worker-option text are legitimate examples. Five examples bind to all interfaces without sufficient exposure warnings, and four also use development reload settings.
1
Files scanned
232
Lines analyzed
5
Review items
0
False positives ignored
Capability review items (5)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Hardcoded IP address
uv run uvicorn main:app --host 0.0.0.0 --port 8000
The example binds Uvicorn to every network interface without an exposure warning. This can make an unprotected application reachable from other hosts.
Medium
Hardcoded IP address
uvicorn.run("main:app", host="0.0.0.0", port=8000, reload=True)
The programmatic example combines an all-interface bind with reload mode. This can expose a development server and its changing code to the network.
Medium
Hardcoded IP address
export UVICORN_HOST="0.0.0.0"
The environment configuration binds all interfaces and enables reload before starting Uvicorn. No warning or access-control requirement accompanies the example.
Medium
Hardcoded IP address
--host 0.0.0.0 \
The combined CLI example binds all interfaces and enables reload. It can expose a development server beyond the local machine.
Medium
Hardcoded IP address
command: uvicorn main:app --host 0.0.0.0 --port 8000 --reload
The Compose example publishes the port, binds all interfaces, and enables reload. This explicitly exposes a development server on the host network.
Risk Factors
⚙️ External commands (45)
SKILL.md:20-29 SKILL.md:29-35 SKILL.md:35-49 SKILL.md:49-53 SKILL.md:53-62 SKILL.md:62-64 SKILL.md:64-66 SKILL.md:66-70 SKILL.md:70-80 SKILL.md:80-82 SKILL.md:82-84 SKILL.md:84-88 SKILL.md:88-94 SKILL.md:94-96 SKILL.md:96-107 SKILL.md:107-111 SKILL.md:111-116 SKILL.md:116-122 SKILL.md:122-127 SKILL.md:127-131 SKILL.md:131-137 SKILL.md:137-141 SKILL.md:141-143 SKILL.md:143-147 SKILL.md:147-149 SKILL.md:149-155 SKILL.md:155-164 SKILL.md:164-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170-171 SKILL.md:171-172 SKILL.md:172-173 SKILL.md:173-174 SKILL.md:174-180 SKILL.md:180-193 SKILL.md:193-197 SKILL.md:197-208 SKILL.md:208-215 SKILL.md:215-216 SKILL.md:216-217 SKILL.md:217 SKILL.md:221-223 SKILL.md:223-227 SKILL.md:227-231
🌐 Network access (7)
📁 Filesystem access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/bossjones-uvicorn/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/bossjones-uvicorn?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/bossjones-uvicorn?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/bossjones-uvicorn/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/bossjones-uvicorn.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
bossjones. (2026). uvicorn security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/bossjones-uvicorn/audits/8BibTeX citation
@techreport{bossjones-bossjones-uvicorn-2026,
author = {bossjones},
title = {uvicorn security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/bossjones-uvicorn/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "uvicorn security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "bossjones"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/bossjones-uvicorn/audits/8"
identifiers:
- type: other
value: "skillstore:bossjones-uvicorn:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance
What You Can Build
Start Local API Development
Create a local Uvicorn setup with a safe host, chosen port, reload, and useful logs.
Prepare a Production Deployment
Select workers, TLS, process management, container settings, and health checks for an ASGI service.
Diagnose Server Configuration
Review module imports, reload directories, worker settings, ports, and logs when Uvicorn does not behave as expected.
Try These Prompts
Start a Local FastAPI App
Create a Uvicorn command for [module]:[application]. Use localhost, port [port], and development reload. Explain each option.
Configure an Application Factory
Show how to run [module]:[factory] as a Uvicorn application factory. Include environment settings for host, port, and logging.
Plan a Production Launch
Design a production Uvicorn setup for [application] with [workers] workers, access logs, TLS files, and a health endpoint. State exposure precautions.
Review a Container Deployment
Review this Uvicorn Dockerfile and Compose setup: [configuration]. Identify reload, worker, port, volume, and network issues. Propose corrected settings.
Best Practices
- Use reload only for development and keep it separate from multi-worker production settings.
- Bind to localhost unless remote access is required, then add firewall, proxy, or platform controls.
- Keep TLS keys outside source control and restrict their filesystem permissions.
Avoid
- Do not combine reload and multiple workers in one Uvicorn launch.
- Do not expose a reload-enabled development server on every network interface.
- Do not place private keys in source repositories or container images.
Frequently Asked Questions
Which Python frameworks can use this skill?
It applies to ASGI frameworks such as FastAPI, Starlette, Django Channels, and compatible custom applications.
Does the skill install Uvicorn?
No. It provides configuration guidance and examples. Install Uvicorn and project dependencies separately.
Can I use reload in production?
No. Reload is intended for development and should not be combined with production worker settings.
When should I bind to 0.0.0.0?
Use it only when external or container traffic must reach Uvicorn. Apply network controls and avoid development reload.
Does the skill cover HTTPS?
Yes. It shows Uvicorn certificate and key options, but certificate creation and lifecycle management are outside its scope.
Does the skill support Docker?
Yes. It includes basic Dockerfile and Docker Compose patterns for running Uvicorn.
Developer Details
Author
bossjonesLicense
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
a39a91716eadede5f4cdefd78178fed4e837a128
Maintenance freshness
7/24/2026
Usage
8 downloads · 183 views
File structure
📄 SKILL.md
More from bossjones
View all📦
pytest
78Write Better Pytest Tests
Python teams need reliable tests that stay clear and easy to extend. This skill guides Claude, Codex, and Claude Code through pytest fixtures, parametrization, async tests, mocking, and test organization.
Coding & Development View
📦
doc-generator
78Generate Python Documentation from Source
Python documentation often becomes incomplete or inconsistent when maintained manually. This skill converts source structure, docstrings, and type hints into organized Markdown.
Documentation View
📦
pydantic
78Build Reliable Pydantic v2 Models
Unvalidated Python data can cause runtime failures and inconsistent API behavior. This skill guides Pydantic v2 model design, validation, configuration, and serialization.
Coding & Development View
📦
structlog
78Build Structured Python Logging with structlog
Python logging configurations can become inconsistent across development, production, and tests. This skill provides practical structlog patterns for context, processors, output formats, exceptions, and testing.
Coding & Development View
📦
apscheduler
78Build Reliable Python Schedules with APScheduler
Background jobs become unreliable when schedules, persistence, and concurrency are configured without clear patterns. This skill provides practical APScheduler guidance for reliable Python scheduling.
Coding & Development View
Related Skills
View all📦
senior-devops
81Automate DevOps Pipelines and Deployments
by alirezarezvani
DevOps work often requires repeatable pipeline, infrastructure, and deployment patterns. This skill provides scripts and reference guides for CI/CD, IaC, deployment, and operations review.
DevOps & Infrastructure View
📦
k8s-manifest-generator
79Generate Kubernetes Manifests Safely
by sickn33
Kubernetes manifests are easy to misconfigure when teams write them from memory. This skill turns requirements into structured YAML guidance with security, probes, resources, and service patterns.
DevOps & Infrastructure View
📦
python-web-app-security-audit
90Audit Python Web Apps Before Release
by glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Security & Compliance View
📦
python-fastapi-patterns
85Build FastAPI APIs with Reusable Patterns
by 0xDarkMatter
FastAPI projects need consistent choices for validation, dependencies, middleware, and background work. This skill gives Claude, Codex, and Claude Code reusable patterns for practical Python API development.
Coding & Development View
📦
python-fastapi-development
80Build FastAPI Backends
by sickn33
FastAPI projects need consistent choices across setup, data models, routes, auth, tests, and deployment. This skill provides a phased workflow with focused prompts for each backend step.
Coding & Development View
📦
python-async-patterns
85Build Reliable Async Python
by 0xDarkMatter
Async Python code often fails due to blocking calls, unbounded tasks, and weak cleanup. This skill provides reusable asyncio patterns, examples, and references for robust concurrent services.
Coding & Development View