The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user requirements for building web applications, creating a surface for potential indirect prompt injection attacks.
Ingestion points: Requirement analysis and implementation requests within the Django context.
Boundary markers: Absent; there are no specific markers or instructions to delimit user-provided data from system instructions.
Capability inventory: The skill does not list any allowed-tools or executable capabilities, functioning purely as a template provider.
Sanitization: No sanitization or validation of input requirements is specified.
[METADATA_POISONING]: A discrepancy exists between the author specified in the YAML frontmatter (Jeffallan) and the expected author context (thesaifalitai).
[NO_CODE]: The skill does not include any executable scripts, shell commands, or tool configurations, significantly reducing its attack surface.
[SAFE]: The skill promotes security best practices, such as using environment variables for secrets, enabling CSRF protection, and avoiding raw SQL queries.

django-expert