The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of local shell commands to perform environment checks, run linters (ruff, black, isort), execute tests (pytest), and perform Django management tasks. All commands are standard for Django development and verification workflows.\n- [EXTERNAL_DOWNLOADS]: Security scanning phases utilize tools like pip-audit, safety, and npm audit which fetch vulnerability databases from their respective official registries. These are well-known, trusted services used for software supply chain security.\n- [CREDENTIALS_UNSAFE]: The skill includes checks for the presence and configuration of sensitive environment variables like DJANGO_SECRET_KEY and uses gitleaks to scan for hardcoded secrets. These actions are intended to verify the security posture of the project rather than expose credentials.\n- [REMOTE_CODE_EXECUTION]: While the skill executes Python scripts dynamically via the Django shell (e.g., creating a superuser or verifying cache), the code is hardcoded for diagnostic/setup purposes and does not incorporate untrusted external input.

django-verification