The Agent Skills Directory

[SAFE]: Secure Production Configuration\n
The skill correctly mandates DEBUG = False for production environments.\n
It enforces secure cookie attributes such as HttpOnly, Secure, and SameSite to mitigate session hijacking and CSRF.\n- [SAFE]: SQL Injection Mitigation\n
The documentation demonstrates safe ORM usage and correctly utilizes parameters for raw SQL queries.\n
It specifically flags f-string interpolation in raw queries as a critical vulnerability to avoid.\n- [SAFE]: Cross-Site Scripting (XSS) Prevention\n
It accurately explains Django's automatic template escaping mechanisms.\n
It provides explicit warnings against the unsafe use of |safe and mark_safe on untrusted user input.\n
It promotes the use of format_html and escapejs for safe data rendering.\n- [SAFE]: Credential Management\n
The skill recommends using environment variables for sensitive data like SECRET_KEY and DATABASE_URL.\n
It includes clear warnings against committing .env files to version control repositories.

django-security