django-reviewer

N+1 queries occur when a loop executes one query per item instead of fetching all data upfront. Use select_related() for foreign keys and prefetch_related() for reverse relations to batch queries into one or two calls, eliminating redundant database hits and improving performance significantly.

Django templates and views can leak data through XSS and CSRF vulnerabilities. Review template auto-escaping, verify CSRF tokens on POST requests, sanitize user input, and audit admin views for unauthorized access. This Skill detects these gaps and recommends remediation patterns.

Migrations can introduce schema conflicts, data loss, or downtime. Validate migration safety by checking data integrity checks, rollback feasibility, and backward compatibility. This Skill audits migrations to surface risky patterns before deployment.

Django admin misconfigurations expose sensitive data, allow unintended edits, or bypass permission checks. This Skill reviews admin class definitions, fieldsets, permissions, and readonly fields to identify and fix risky customizations.

ORM methods like select_related and prefetch_related optimize queries automatically while keeping code maintainable and secure. They outperform raw SQL by reducing network roundtrips and avoiding common pitfalls like injection vulnerabilities.