NYC

django-expert

Fail

Audited by Socket on Feb 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

This is a benign Django tutorial/skill manifest and example project. No malicious behavior or supply-chain attack patterns were found. Identified issues are normal application-level correctness/security concerns (anonymous comment posting without login checks and a race condition on slug uniqueness). These should be fixed for production use (require authentication for comment creation or handle AnonymousUser, rely on DB uniqueness and catch IntegrityError).

Confidence: 80%Severity: 20%
Audit Metadata
Analyzed At
Feb 15, 2026, 09:17 PM
Package URL
pkg:socket/skills-sh/personamanagmentlayer%2Fpcl%2Fdjango-expert%2F@b224873da01426ec71dc5186350fd9dd3f179773