django-dev-ninja
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill offers well-structured templates for Django Ninja API development, emphasizing modularity and logical separation of concerns.
- [CREDENTIALS_SAFE]: Authentication examples correctly utilize Django settings for secrets (e.g.,
settings.SECRET_KEY) rather than hardcoding credentials. It demonstrates secure patterns for JWT and API key validation. - [INDIRECT_PROMPT_INJECTION]: The templates consistently use Pydantic schemas for request body and query parameter validation. This approach ensures that all incoming data is strictly typed and validated before reaching business logic, serving as an effective layer of protection against malformed input.
- [COMMAND_EXECUTION]: No usage of subprocess calls or shell commands was identified. The provided code logic is confined to standard Python and Django framework operations.
- [DYNAMIC_EXECUTION]: The skill avoids unsafe dynamic code execution patterns such as
eval()orexec(), relying instead on static Python code and standard framework routing.
Audit Metadata