django-verification
Warn
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes numerous system and development commands across its phases, including linting tools (ruff, black, mypy), testing frameworks (pytest), and Django management utilities (manage.py).\n- [COMMAND_EXECUTION]: Phases 7, 9, and 10 utilize shell heredocs to execute multi-line Python scripts directly through the
manage.py shell, which allows for dynamic code execution within the application context.\n- [CREDENTIALS_UNSAFE]: Phase 6 contains a hardcoded superuser creation command snippet that includes a static email ('admin@example.com') and password ('admin'), posing a risk if utilized in non-development environments.\n- [EXTERNAL_DOWNLOADS]: The skill references package management and auditing tools likepipandnpm, which fetch code and updates from standard external registries (PyPI, npmjs).
Audit Metadata