The Agent Skills Directory

[SAFE]: The skill is designed to promote secure coding practices in Django REST Framework applications.
Best Practices: It mandates the use of Row Level Security (RLS), UUIDs for primary keys to prevent resource enumeration, and explicit field whitelisting in serializers to prevent mass assignment vulnerabilities.
SQL Injection Prevention: The provided documentation and code assets (e.g., assets/security_patterns.py) explicitly demonstrate and warn against SQL injection, providing correct parameterized alternatives using the Django ORM.
Information Disclosure: ViewSet patterns include logic to return generic 404 errors instead of 403s or detailed error messages that could leak internal system state or verify resource existence for unauthorized users.
Input Sanitization: The skill provides clear patterns for field-level validation and normalization (e.g., UID formatting) to handle untrusted user input safely.
External Documentation: The use of MCP tools to query library documentation targets well-known, official sources (e.g., Django, DRF, and drf-spectacular), which is a standard and safe operational pattern for development assistants.

django-drf