django-expert
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of educational resources and best practices for Django development. It explicitly instructs users on how to avoid security vulnerabilities such as SQL Injection, XSS, and CSRF in the
references/security-checklist.mdfile. - [DATA_EXPOSURE]: No hardcoded credentials were found. The documentation consistently recommends loading sensitive configuration (like
SECRET_KEYand database passwords) from environment variables or secure secret management systems as demonstrated inreferences/production-deployment.md. - [EXTERNAL_DOWNLOADS]: The skill mentions several common and well-known Python packages (e.g.,
celery,redis,sentry-sdk,pytest-django). These are standard tools in the Django ecosystem and do not originate from untrusted or suspicious sources. - [INDIRECT_PROMPT_INJECTION]: As a coding assistant, the skill processes user-provided code and requests. However, it lacks dangerous autonomous execution chains and includes specific instructions for input validation and sanitization, which are documented as safety measures for the developer to implement.
Audit Metadata