The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/analyze_django.py script uses subprocess.run to orchestrate the execution of internal analysis scripts. This is implemented securely by passing arguments as a list and avoiding the use of shell=True, which prevents shell injection vulnerabilities.
[SAFE]: The skill uses Python's built-in ast module to perform static code analysis. This method ensures that the user's source code is parsed into a tree for inspection but never executed, eliminating the risk of runtime exploitation from the analyzed content.
[SAFE]: The skill identifies security-related anti-patterns such as hardcoded SECRET_KEY values, enabled DEBUG modes, and unsafe template filtering, acting as a security linter rather than a threat.

django-simplifier