django-expert
Fail
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify existing Django project files, creating an attack surface for indirect instructions hidden in project data.
- Ingestion points: The skill processes local files such as
settings.py,models.py, andmanage.pyinSKILL.md. - Boundary markers: The instructions lack specific delimiters or warnings to ignore potentially malicious instructions embedded in comments or data within the files being analyzed.
- Capability inventory: The skill utilizes subprocess calls for database migrations and file-writing capabilities for generating Django components.
- Sanitization: No explicit sanitization or filtering is defined for external code or configuration content ingested by the agent.
- [COMMAND_EXECUTION]: The skill workflow requires the execution of shell commands to manage the application lifecycle.
- Evidence: The core workflow in
SKILL.mdinstructs the agent to runpython manage.py makemigrationsandpython manage.py migrate. - Evidence: The skill suggests validating API endpoints using
curlchecks. - [EXTERNAL_DOWNLOADS]: The skill references external resources for supplementary documentation.
- Evidence:
SKILL.mdcontains a link tohttps://jeffallan.github.io/claude-skills/skills/backend/django-expert/. This domain is an official resource associated with the skill author on a well-known hosting service.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata