django-security-scan
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a specialized defensive utility for performing security audits on Django codebases. It identifies well-known vulnerabilities and follows industry best practices for configuration and code safety.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external project files including settings.py, views.py, and templates. This ingestion of untrusted data represents an attack surface for indirect prompt injection. However, the risk is low as the skill's instructions are narrowly focused on security auditing and it does not utilize tools for network access or persistent file modification. The mandatory evidence chain includes: ingestion of source code files, absence of explicit boundary markers in instructions, read-only analysis capabilities, and reliance on the agent's internal reasoning without specific output sanitization rules.
Audit Metadata