The Agent Skills Directory

[SAFE]: The skill implements secret management best practices by using environment variables (e.g., env('DJANGO_SECRET_KEY'), env('DB_PASSWORD')) rather than hardcoding credentials.
[SAFE]: Production settings include essential security configurations such as SECURE_SSL_REDIRECT, SESSION_COOKIE_SECURE, CSRF_COOKIE_SECURE, and HSTS headers.
[SAFE]: User registration patterns correctly use set_password() to ensure passwords are properly hashed before storage.
[SAFE]: The patterns promote the use of Django's permission system (e.g., IsAuthenticated, IsOwnerOrReadOnly) to protect API endpoints.
[SAFE]: Database patterns use parameterized queries through the Django ORM, which inherently protects against SQL injection.

django-patterns