The Agent Skills Directory

[SAFE]: No malicious patterns detected. The skill provides legitimate developer guidelines for Django and DRF.
[CREDENTIALS_SAFE]: The skill correctly demonstrates best practices for secret management by using environment variables (e.g., env('DJANGO_SECRET_KEY')) instead of hardcoding sensitive credentials in configuration files.
[INDIRECT_PROMPT_INJECTION]: While the skill defines patterns for ingesting user data via Django REST Framework (DRF) serializers and viewsets (in references/drf.md), it explicitly promotes secure practices such as input validation through Serializers and the use of the Django ORM, which mitigates common injection risks.
[OBFUSCATION]: The content is clear and instructional. No hidden characters, base64 encoding, or homoglyph attacks were detected. The use of non-English terms like 'Referências' is context-appropriate and legitimate.
[DYNAMIC_CONTEXT_INJECTION]: Analysis of SKILL.md confirms there are no dynamic shell execution patterns (!command) that would run at load time.

django-patterns