django-expert
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze project structures and read existing source code to provide development advice, which creates an inherent surface for processing instructions embedded in the code. 1. Ingestion points: Explicitly mentions using 'django-ai-boost' and reading 'relevant existing code' from the local environment. 2. Boundary markers: None specified in the instructions. 3. Capability inventory: Suggests code implementations, migrations, and production settings; does not directly execute commands. 4. Sanitization: Instructions include reviewing output for security best practices like CSRF and SQL injection prevention.
- [EXTERNAL_DOWNLOADS]: The skill metadata contains an install command that fetches the SKILL.md file from a remote GitHub repository (MisbahKhan0009/chorcha-server). This is a standard skill distribution method.
Audit Metadata