django-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructional content following industry-standard best practices for Django development. It specifically identifies and teaches how to avoid common vulnerabilities such as SQL injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF).
- [COMMAND_EXECUTION]: The skill uses the Bash tool restricted to python and pip environments. This is appropriate for a Django development assistant and is used in a safe manner within the context of managing a local development environment.
- [EXTERNAL_DOWNLOADS]: The skill references standard Python packages (e.g., django-redis, celery, djangorestframework) and provides instructions for installing them via pip from the official PyPI registry. All referenced organizations and repositories belong to well-known technology vendors.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs the user and agent to store secrets in environment variables (via django-environ or python-decouple) rather than hardcoding them in the source code. No hardcoded API keys or secrets were found in the documentation.
- [PROMPT_INJECTION]: No malicious instructions aimed at overriding agent behavior or bypassing safety filters were detected. The content is consistently instructional and focuses on code quality.
Audit Metadata