django-dev-test
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install standard, well-known testing packages from the Python Package Index (PyPI), including
pytest,pytest-django,factory-boy, andpytest-cov. - [CREDENTIALS_UNSAFE]: Includes hardcoded dummy passwords (such as 'testpass123' and 'securepass123') within test factory and service test examples. These are standard placeholders for local development and testing environments and do not pose a risk to production systems.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill provides patterns for testing functions that ingest external data, such as API request bodies in
TestUsersAPIand file uploads in theuploaded_filefixtures. - Boundary markers: Not present; the examples assume standard test data handling within the Django framework.
- Capability inventory: The skill uses standard testing and mocking tools (
mocker,responses-mock,moto). It does not demonstrate any dangerous capabilities like arbitrary command execution or unauthorized network exfiltration using the ingested data. - Sanitization: The patterns rely on default Django model and form validation logic to handle external inputs.
Audit Metadata