Django Clinic — security audit of your pasted Django project

Paste your Django project - settings.py or a settings package, urls.py, views, models, serializers, forms, templates, requirements.txt - and get a security audit: a posture verdict, a twelve-control status table, prioritized findings each with a corrected fragment, a hardened settings block and the commands to verify it. A free in-browser prescan parses your settings and middleware first and the audit must reconcile every flag it raises. Derived from the @affaan-m/django-security agent skill.

Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.