django-security
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a static documentation and code reference guide for securing Django applications. It does not perform any automated actions, system commands, or network requests.
- [SAFE]: Instructions correctly emphasize the use of environment variables for sensitive data like
SECRET_KEYand database credentials, following industry best practices for secret management. - [SAFE]: Vulnerable code examples (e.g., string interpolation in SQL queries) are clearly marked as 'Avoid' or 'vulnerable' for educational purposes and are not intended for execution by the agent.
- [SAFE]: The security configurations recommended (HSTS, CSP, CSRF, Secure Cookies) align with current OWASP and Django documentation standards.
Audit Metadata