django-access-review
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a comprehensive instructional guide for security researchers to identify authorization gaps. It provides a logical framework for code tracing and verification, aligning with best practices like the OWASP Cheat Sheet Series.
- [COMMAND_EXECUTION]: The skill includes shell commands (
grep,head) intended for local file searching. These commands are used to identify permission decorators, base classes, and model managers within a Django codebase. The usage is appropriate for the skill's stated purpose and is limited to read-only search operations. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it instructs an agent to ingest and analyze external, potentially untrusted source code.
- Ingestion points: Target application source code (
*.py,models.py). - Boundary markers: None explicitly defined in the prompt interpolation, although the instructions emphasize investigation over pattern matching.
- Capability inventory: Local file read and search capabilities via
grepandhead(Phase 1). - Sanitization: None; the skill relies on the agent's internal reasoning and manual verification steps (Phase 5) to mitigate the risk of malicious instructions within the analyzed code influencing the final report.
- [DATA_EXPOSURE_&_EXFILTRATION]: No sensitive file paths, hardcoded secrets, or unauthorized network operations were identified. The referenced OWASP URL is a trusted information source.
Audit Metadata