Files
ECC/pi/core/commands/fastapi-review.md
T
Affaan MustafaandGitHub c70874fae9 feat(pi): curated pi/core skills+prompts profile, CI load test, and 2.2.2 release sync (#3264)
Adds a curated, Pi-native, skills+prompts-only profile at pi/core/ for downstream packagers that mirror GitHub Releases.

- manifests/pi-core.json: explicit include lists, per-item exclusion reasons, curation rules, safety allowlists; every root skill and command must be classified.
- scripts/build-pi-core.js regenerates pi/core deterministically (package.json from VERSION, LICENSE, README.md, CURATION.md, skills/, commands/); --check fails CI on drift. council is renamed ecc-council inside pi/core only.
- Safety checks: no callable endpoints outside the allowlist, no npx/curl|sh/pip install, no secrets, no absolute home paths, no symlinks, valid frontmatter, no duplicate names.
- CI: build + drift check and an offline Pi CLI load test of pi/core.
- Release: VERSION, package.json and pi/core/package.json at 2.2.2, CHANGELOG, tag-triggered release verification, and a two-week cadence in CONTRIBUTING.md.

pi/core: 123 of 293 skills and 24 of 94 commands; 35,006 characters of skill description text.
2026-09-29 20:24:05 -05:00

1007 B

description
description
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, security, performance, and testability.

FastAPI Review

Invoke the fastapi-reviewer agent for a focused FastAPI review.

Usage

/fastapi-review [file-or-directory]

Review Areas

  • App factory, router boundaries, middleware, and exception handlers.
  • Pydantic request and response schema separation.
  • Dependency injection for database sessions, auth, pagination, and settings.
  • Async database and external HTTP patterns.
  • CORS, auth, rate limits, logging, and secret handling.
  • OpenAPI metadata and documented response models.
  • Test client setup and dependency overrides.

Expected Output

[SEVERITY] Short issue title
File: path/to/file.py:42
Issue: What is wrong and why it matters.
Fix: Concrete change to make.
  • Agent: fastapi-reviewer
  • Skill: fastapi-patterns
  • Command: /python-review
  • Skill: security-scan