django-security
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content on Django security that adheres to established security principles.
- [SAFE]: Code examples showing vulnerabilities (e.g., SQL injection through string interpolation) are clearly marked as insecure and compared with safe alternatives using the Django ORM.
- [SAFE]: Secure configuration for production environments is emphasized, including the disabling of DEBUG mode and the enforcement of SSL/HTTPS headers (HSTS, secure cookies).
- [SAFE]: Management of secrets (like SECRET_KEY and database credentials) is handled via environment variables, with explicit warnings against committing sensitive .env files to version control.
- [SAFE]: Recommended libraries (such as django-environ and djangorestframework) are standard, well-maintained packages in the Python ecosystem.
Audit Metadata