django-tdd

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill contains hardcoded dummy passwords (e.g., 'testpass123' and 'adminpass123') within test fixtures and factory definitions. These are explicitly used for an in-memory SQLite database environment and do not represent a production security risk, though they technically match credential patterns.
  • [SAFE]: The skill configuration follows security and speed best practices for testing environments, specifically by overriding EMAIL_BACKEND to use the console and using an in-memory database to ensure test isolation and prevent data leakage.
  • [SAFE]: External API interactions (e.g., Stripe) are handled via unittest.mock.patch, ensuring that the agent does not attempt to make real network requests or use live API keys during test execution.
  • [SAFE]: The skill demonstrates safe data handling by relying on Django's ORM and Django REST Framework's serializer validation for processing user input, which mitigates standard injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 08:24 PM