security-validator

Name: security-validator
Availability: InStock
Author: rafaelcostaf4-afk

Audit Django codebases for security, dependencies, and configuration before deployment.

Updated Mar 23, 2026

Search Tags:#testing #security #vulnerability #audit #devsecops #django

Ready to run

npx skills add https://github.com/rafaelcostaf4-afk/SurveyHub --skill security-validator

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-validator
Source: https://github.com/rafaelcostaf4-afk/SurveyHub/tree/main/.claude/skills/security-validator
Command: npx skills add https://github.com/rafaelcostaf4-afk/SurveyHub --skill security-validator

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This tool performs a comprehensive DevSecOps audit for Django-based projects to identify security gaps, code quality issues, and governance risks before deployment.

Core Features & Use Cases

End-to-end security checks including code quality, cyclomatic complexity, docstrings, and dead code detection.
Django-specific security validation covering CSRF, SECRET_KEY handling via environment, allowed hosts, and view permissions.
Dependency and vulnerability analysis using standard tools to detect CVEs and insecure packages.
Audit reporting with a certification-style output detailing findings and remediation guidance for production readiness.

Quick Start

Run the security-validator against your Django project to generate a certification report before merging to production.

Frequently Asked Questions about security-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What does a Django security audit cover for production readiness?▼

A Django DevSecOps audit checks code quality, security patterns, dependencies, and configuration before deployment. It validates SECRET_KEY handling, production DEBUG settings, CSRF middleware, and template safety to identify security gaps and governance risks.

Does the audit check if Django SECRET_KEY is loaded from environment variables?▼

Yes, the audit performs dependency and vulnerability analysis to detect CVEs and insecure packages. It uses standard security tools to scan your project dependencies, identifying known vulnerabilities and providing remediation guidance for production readiness.

Does the audit check if Django SECRET_KEY is loaded from environment variables?▼

Yes, the audit checks that your Django SECRET_KEY is properly loaded from environment variables rather than hardcoded. It also verifies DEBUG is false in production, validates CSRF middleware, and ensures safe template handling to prevent security misconfigurations.

Do I need to configure anything specific before running a Django security audit?▼

The certification report details findings from code quality, security checks, dependency scans, and configuration validation. It provides formal documentation of identified vulnerabilities, governance risks, and specific remediation guidance to achieve production readiness.

Do I need to configure anything specific before running a Django security audit?▼

Ensure your Django project has environment variables set for SECRET_KEY and production settings configured. The audit validates CSRF middleware, safe template handling, view permissions, and dependency security, requiring these components to be present for accurate assessment.

What is included in the certification report generated by a Django security audit?▼

Your Django app fails the audit if DEBUG is true in production, SECRET_KEY is hardcoded, CSRF middleware is missing, or dependencies contain known CVEs. The certification report identifies these specific security gaps and governance risks blocking deployment readiness.