django-security
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code snippets for securing Django applications. It includes proper configuration for production environments, such as disabling DEBUG mode and enforcing HTTPS via HSTS and secure cookies.
- [SAFE]: Security best practices for secret management are followed, recommending the use of environment variables and
.envfiles while explicitly warning against committing sensitive credentials to source control. - [SAFE]: The skill accurately identifies vulnerable code patterns (e.g., manual SQL string formatting) and provides safe alternatives using the Django ORM's built-in parameterization.
- [SAFE]: It incorporates industry-standard security headers including Content Security Policy (CSP), X-Frame-Options, and X-Content-Type-Options to mitigate various web-based attacks.
Audit Metadata