django-security-scan
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a static analysis tool for Django projects, defining rules to detect critical security flaws such as SQL injection (DJ-ORM-001), Cross-Site Scripting (DJ-TPL-001), and exposed secrets (DJ-CFG-003).
- [SAFE]: The skill ingests untrusted code from the project being audited (e.g., settings.py, views.py). While this represents an attack surface for indirect prompt injection, the skill's functionality is limited to analytical reporting and does not include capabilities that could be abused via malicious input (such as network access or privilege escalation).
- [SAFE]: External links provided in the references section point to official, well-known documentation for the Django framework and Django REST Framework.
Audit Metadata