django-verification

Warn

Audited by Gen Agent Trust Hub on Jul 4, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes numerous system and development commands across its phases, including linting tools (ruff, black, mypy), testing frameworks (pytest), and Django management utilities (manage.py).\n- [COMMAND_EXECUTION]: Phases 7, 9, and 10 utilize shell heredocs to execute multi-line Python scripts directly through the manage.py shell, which allows for dynamic code execution within the application context.\n- [CREDENTIALS_UNSAFE]: Phase 6 contains a hardcoded superuser creation command snippet that includes a static email ('admin@example.com') and password ('admin'), posing a risk if utilized in non-development environments.\n- [EXTERNAL_DOWNLOADS]: The skill references package management and auditing tools like pip and npm, which fetch code and updates from standard external registries (PyPI, npmjs).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 4, 2026, 07:07 PM