django-tdd
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill contains hardcoded dummy passwords (e.g., 'testpass123' and 'adminpass123') within test fixtures and factory definitions. These are explicitly used for an in-memory SQLite database environment and do not represent a production security risk, though they technically match credential patterns.
- [SAFE]: The skill configuration follows security and speed best practices for testing environments, specifically by overriding
EMAIL_BACKENDto use the console and using an in-memory database to ensure test isolation and prevent data leakage. - [SAFE]: External API interactions (e.g., Stripe) are handled via
unittest.mock.patch, ensuring that the agent does not attempt to make real network requests or use live API keys during test execution. - [SAFE]: The skill demonstrates safe data handling by relying on Django's ORM and Django REST Framework's serializer validation for processing user input, which mitigates standard injection vulnerabilities.
Audit Metadata